Add way for infisical to switch accounts when signed into wrong account

README.md

@@ -287,6 +287,35 @@ native simulator.
 This project is currently private, so this section is a reference for what the
 application expects rather than public setup documentation.
 
+<details>
+<summary><strong>Local Infisical account selection</strong></summary>
+
+Local `dev` and `staging` commands export secrets through Infisical. Spoon runs
+`scripts/infisical-account ensure` from `scripts/export-env` before exporting so
+machines logged into multiple Infisical accounts do not accidentally use the
+wrong organization.
+
+If your machine has only one local Infisical account, no extra setup is needed.
+If it has multiple accounts, create this ignored local file:
+
+```sh
+mkdir -p .local
+printf "INFISICAL_EMAIL=me@gbrown.org\n" > .local/infisical.env
+```
+
+Log into each needed account once with `infisical login`. You can inspect local
+profiles without printing tokens:
+
+```sh
+jq '.loggedInUsers[] | {email, domain}' ~/.infisical/infisical-config.json
+```
+
+`.local/infisical.env` supports only `INFISICAL_EMAIL=...` and must not be
+committed. CI is unchanged; it uses injected environment files/secrets and must
+not call Infisical.
+
+</details>
+
 <details open>
 <summary><strong>Public Next variables</strong></summary>