Summary

• adk create always writes a .env file.
• The scaffold now also creates or updates .gitignore with .env.
• Existing .gitignore entries are preserved, and .env is not duplicated.

Why

If ADK creates .env by default, it should also ignore that file by default. This avoids relying on operator accuracy for a predictable secret-handling risk.

Testing

• PYTHONPATH=src pytest tests/unittests/cli/utils/test_cli_create.py
• PYTHONPATH=src pytest tests/unittests/cli/utils/test_cli_tools_click.py::test_cli_create_cmd_invokes_run_cmd tests/unittests/cli/test_cli_tools_click_option_mismatch.py::test_adk_create
• Manual smoke test: adk create l1 generated .gitignore containing .env

Notes

• git diff --check passed.
• pyink and isort were not available in the current uv environment, so formatter checks could not be run locally.