Should the Deployer recipe (config) file deploy.php be added to .gitignore?
I could not find any information on this. What is best practice?
If you want others to be able to perform deployment, you should share this file with your team.
I do not see any danger if you avoid use strings with passwords or tokens (like gitlab access token). That's why you should use ssh key instead.