build: exclude AI, credential and runtime state

.dockerignore

@@ -1,21 +1,49 @@
-# Backend image build context is the repository root (see compose.yaml); keep it small.
 .git
 .gitea
-.state
+.github
-.mypy_cache
+.gitignore
-.ruff_cache
+.agents
+.codex
+.claude
+.dyad
+.idea
+.vscode
+.vs
+.venv
+__pycache__
 .pytest_cache
-**/__pycache__
+.ruff_cache
-**/.venv
+.mypy_cache
-**/node_modules
+node_modules
-**/dist
+frontend/node_modules
-**/playwright-report
+frontend/dist
-**/test-results
+dist
 artifacts
-docs
+coverage
-deploy
+playwright-report
-n8n
+test-results
-frontend
-*.tgz
-*.tar.gz
 .env
+.env.*
+!.env.example
+*.key
+*.pem
+*.p12
+*.pfx
+secrets
+credentials
+.state
+data
+backups
+*.db
+*.db-shm
+*.db-wal
+*.sqlite
+*.sqlite-shm
+*.sqlite-wal
+*.log
+*.tmp
+*.zip
+*.tar
+*.tar.gz
+.DS_Store
+Thumbs.db