Where does the code live?

Your GitHub or GitLab. I push to a branch, you review the PR, I merge after approval. I do not keep private copies of client code.