Options -Indexes
DirectoryIndex index.php

<FilesMatch "^(what\.json|AGENTS\.md|deploy\.sh)$">
  Require all denied
</FilesMatch>