demo secrets and new build scripts

scripts/deploy.cmd

@@ -0,0 +1,38 @@
+@echo off
+REM Build + flash the M5Stack Dashboard project via PlatformIO on Windows.
+REM
+REM Usage:
+REM   scripts\deploy.cmd            (auto-detect USB port)
+REM   scripts\deploy.cmd COM5       (force a specific port)
+REM
+REM Does NOT open the serial monitor afterwards.
+
+setlocal
+cd /d "%~dp0\.."
+
+set VENV_DIR=.venv-platformio
+
+if not exist "%VENV_DIR%" (
+    echo Creating local virtualenv in %VENV_DIR% ...
+    python -m venv "%VENV_DIR%"
+    "%VENV_DIR%\Scripts\pip.exe" install --upgrade pip
+    "%VENV_DIR%\Scripts\pip.exe" install platformio
+)
+
+set PIO=%VENV_DIR%\Scripts\pio.exe
+
+if "%~1"=="" (
+    echo Auto-detecting upload port...
+    "%PIO%" run --target upload
+) else (
+    echo Using forced upload port: %~1
+    "%PIO%" run --target upload --upload-port %~1
+)
+
+if errorlevel 1 (
+    echo Deploy FAILED.
+    exit /b 1
+)
+
+echo Build + flash complete.
+endlocal