Mirror the production source whitelist from revision d77155d38b1957e69e9537b9200fd2216992650a. Exclude internal documentation, deployment tooling, tests, examples, environment files, runtime data, and credentials.