mypy and other Python CI targets require a local.env.yml with a
secret_key before they can run. This was only set up automatically in
CI (via .github/actions/setup) but was not mentioned in the contributor
docs. Add a dedicated section explaining why it is needed and how to
generate it with 'make gen-dev-config'.
e75992dbae