🥇 export from upstream (7b48e4e)

README.md

@@ -85,7 +85,7 @@ sandcage setup ssh --global          # configure SSH globally
 ## Configuration
 
 <p align="center">
-  <img src="config-layers.svg" alt="Configuration layering — defaults, global, project, CLI flags" width="720">
+  <img src="config-layers.svg" alt="Configuration layering — defaults, global, project, local, CLI flags" width="720">
 </p>
 
 Configuration is layered. Each level overrides the one below it, so you only set what you need:
@@ -93,6 +93,7 @@ Configuration is layered. Each level overrides the one below it, so you only set
 **Compiled defaults** — sensible out of the box
 **Global config** (`~/.sandcage/config.toml`) — user-wide preferences
 **Project config** (`.sandcage.yml`) — per-project setup, checked into version control
+**Local config** (`.sandcage.local.yml`) — personal overrides, gitignored (SSH keys, secrets, local mounts)
 **CLI flags** — per-invocation overrides
 
 ### .sandcage.yml example