Git Good
Scrubbed creds that only left the working tree. git log the tooling project, check out the initial commit, and pull the service password from the old config.py to become the next user and grab their flag.
$ PrivEsc
Looking Back
Sloppy operator left a password in shell history. Read ~/.bash_history from the svc-deploy foothold to find creds echoed into chpasswd, su to that user, and read their flag.