ci: preserve server .env files during rsync to APP_DIR (fix missing BETTER_AUTH_SECRET)

.github/workflows/ci-cd-web-desktop.yml

@@ -33,7 +33,13 @@ jobs:
       - name: Sync workspace to APP_DIR
         run: |
           mkdir -p "$APP_DIR"
-          rsync -az --delete --exclude '.git' --exclude '.next' ./ "$APP_DIR"/
+          rsync -az --delete \
+            --exclude '.git' \
+            --exclude '.next' \
+            --exclude '.env*' \
+            --exclude 'apps/desktop/.env*' \
+            --exclude 'convex/.env*' \
+            ./ "$APP_DIR"/
 
       - name: Install and build (Next.js)
         run: |