The dev config.toml contains a password hash and should not be committed. Add a config.toml.example template instead and document the copy step.