Hi,
Publish profiles are stored within .vs/publishprofiles.xml. The profile does not store the passwords so you can safely add the file/folder into your source control.
In the future, we might optionally store the profile into the project file, instead of this.
I hope it helps.