chore: add secure gitignore

.gitignore

@@ -0,0 +1,58 @@
+# Environment and secrets
+.env
+.env.*
+!.env.example
+!.env.docker.example
+*.pem
+*.key
+*.p12
+*.pfx
+*.crt
+*.cer
+
+# Node.js
+node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+
+# Databases and SQLite runtime files
+db/*.db
+db/*.db-shm
+db/*.db-wal
+db/*.sqlite
+db/*.sqlite3
+*.db-shm
+*.db-wal
+
+# Runtime data
+uploads/*
+!uploads/.gitkeep
+backups/*
+!backups/.gitkeep
+logs/
+*.log
+tmp/
+temp/
+sessions/
+data/
+docker-data/
+
+# Generated files and local state
+coverage/
+dist/
+.cache/
+*.pid
+*.seed
+
+# Editors and operating systems
+.vscode/
+.idea/
+.DS_Store
+Thumbs.db
+desktop.ini
+
+# Local Docker overrides
+compose.override.yaml
+docker-compose.override.yml