Notes from deploying a PHP 8 + MySQL application on Hostinger: where secrets live, how .htaccess is set up, and what to do when the firewall answers 403.