Add extra sensitive files to cleanup (#217)

* Ensure auth.json is excluded from builds.

* Include build, not just bundle

Author: PeteBishwhip

src/Commands/BundleCommand.php

@@ -236,6 +236,7 @@ private function addFilesToZip(ZipArchive $zip): void
                 'build', // Compiled box assets
                 'temp', // Temp files
                 'tests', // Tests
+                'auth.json', // Composer auth file
             ])
             ->exclude(config('nativephp.cleanup_exclude_files', []));
 

src/Traits/CopiesToBuildDirectory.php

@@ -34,6 +34,7 @@ abstract protected function sourcePath(string $path = ''): string;
         '**/.github',
 
         // Potentially containing sensitive info
+        'auth.json', // Composer auth file
         'database/*.sqlite',
         'database/*.sqlite-shm',
         'database/*.sqlite-wal',