The Telegram token is a secret.

Keep it in the environment and never paste it into code, docs, screenshots, or issue text. If a token is exposed, rotate it in Telegram before redeploying.

Admin chat IDs are also deployment values and should stay out of the repo.