- Move ROA_API_PASSWORD and ORACLE_PASSWORD to .env
- Update process_bon.py to use python-dotenv
- chmod 600 on .env and credentials/*
- Install python-dotenv dependency
- New: tools/yt_download.py with cookies support + rate limit tracking
- New: docs/YOUTUBE-SETUP.md complete documentation
- Updated: night-execute jobs to use new script
- Updated: TOOLS.md with YouTube section
- Added: 5 new YouTube notes (OpenClaw, cost optimization, task system, leads)
- Added: credentials/ to .gitignore