The following were deliberately excluded from the production release:
.env and all environment copies
vendor/
node_modules/
storage/
public/storage/
public/uploads/
public/.htaccess
resources/views/settings.blade.php
resources/views/purchases_updated.blade.php
all backup files (*.bak*, *.broken_*)
database/database.sqlite
SQL dumps and test data
composer.json and composer.lock (identical between test and production)