feature/gro-2516-harden-gitignore
dev
Adds root-level .gitignore to prevent accidental commit of agent credential artifacts (.gh-token, .config/gh/, .claude/, .codex/, AGENT_HOME) per the GRO-2516 guardrail. Co-Authored-By: Paperclip <noreply@paperclip.ing>