Secrets in webroot: second `wp-config-bkp.php` + live `wp-config.php` (DB password + salts)

The web root exposes config backups and the live config file containing the database password and secret keys.

www/luc1f3r/app/config/wp-config-bkp.php, wp-config.php:7