Remove embedded credentials and private deployment configuration; document the remaining publication checks.