# configs/ holds include()/CLI-only code and data — never a direct HTTP target.
# Defence in depth for the internal-path guard at the top of auto-prepend.php
# (which 403s any PHP here regardless). This also covers non-PHP files that
# the prepend never sees (e.g. configs/*.conf, *.tpl).
Require all denied
