build: exclude AI, credential and runtime state

.dockerignore

@@ -1,21 +1,49 @@
-# Backend image build context is the repository root (see compose.yaml); keep it small.
 .git
 .gitea
-.state
-.mypy_cache
-.ruff_cache
+.github
+.gitignore
+.agents
+.codex
+.claude
+.dyad
+.idea
+.vscode
+.vs
+.venv
+__pycache__
 .pytest_cache
-**/__pycache__
-**/.venv
-**/node_modules
-**/dist
-**/playwright-report
-**/test-results
+.ruff_cache
+.mypy_cache
+node_modules
+frontend/node_modules
+frontend/dist
+dist
 artifacts
-docs
-deploy
-n8n
-frontend
-*.tgz
-*.tar.gz
+coverage
+playwright-report
+test-results
 .env
+.env.*
+!.env.example
+*.key
+*.pem
+*.p12
+*.pfx
+secrets
+credentials
+.state
+data
+backups
+*.db
+*.db-shm
+*.db-wal
+*.sqlite
+*.sqlite-shm
+*.sqlite-wal
+*.log
+*.tmp
+*.zip
+*.tar
+*.tar.gz
+.DS_Store
+Thumbs.db