chore: initial baseline with P0-safety .gitignore

.gitignore

@@ -0,0 +1,114 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+dist/
+build/
+.venv/
+venv/
+.eggs/
+
+# 环境变量
+.env
+.env.local
+.env.*
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# 系统
+.DS_Store
+Thumbs.db
+
+# Node
+node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# 前端构建
+frontend-agent/dist/
+frontend-h5/dist/
+
+# 日志
+*.log
+logs/
+
+# Docker
+*.pid
+*.seed
+*.pid.lock
+
+# =============================================================================
+# P0 安全: SSL 私钥 / 部署包 / 历史日志 (2026-06-14 强化)
+# =============================================================================
+
+# SSL 私钥 + 证书请求
+*.key
+*.pem
+*.csr
+
+# docs/ 下所有 servyou.com.cn 证书(目录 + 文件 + zip 全部,** 匹配任意深度)
+docs/servyou.com.cn**
+docs/*证书*/
+docs/*ssl*/
+docs/*SSL*/
+docs/*证书*.zip
+/docs/*证书*.zip
+
+# 部署包 + 部署产物(体积大 + 经常含私钥)
+deploy-*.tar
+deploy-*.tar.gz
+deploy-packages/
+deploy-patch.tar
+deploy-admin.tar
+deploy-agent.tar
+deploy-backend.tar
+deploy-h5.tar
+deploy-portal.tar
+*.tar
+*.tar.gz
+
+# 历史日志 + 构建日志(stderr 噪声)
+*.log.err
+build_logs/
+agent_build.log.err
+build-agent.log.err
+build-agent2.log.err
+build-h5.log.err
+build-h5-fix.log.err
+build_all.log.err
+
+# 本地部署脚本 + 部署目录
+build.ps1
+build_all.ps1
+deploy-frontend-nas.bat
+deploy-nas/
+
+# 部署产物 zip(体积大 + 含 dist)
+frontend-*-dist-fix*.zip
+frontend-*-dist-fix-*.zip
+it-smart-desk-*-deploy.zip
+
+# deploy-server/ 部署配置(nginx conf 入仓, .env 排除)
+deploy-server/**/.env*
+deploy-server/**/secrets/
+deploy-server/**/*.pem
+deploy-server/**/*.key
+
+# SQLite 本地测试库
+it_smart_desk.db
+*.db
+*.sqlite
+*.sqlite3
+
+# pytest / 临时
+.pytest_cache/
+/tmp/
+*.pid
+.coverage
+htmlcov/