Add a test for `.git/secret.js` -- without the `public/` in front.