Update .gitignore

.gitignore

@@ -1,24 +1,50 @@
-# ── Secrets — never commit ───────────────────────────────────────────────
-config/api_keys.json
-config/certs/
-*.pem
-*.key
+# ── MARK LIII — what never belongs in the repository ──────────────────────────
+# Everything listed here is created by the app on first run. A fresh clone with
+# none of it present boots straight to the setup screen, which is the intended
+# first experience — so nothing here needs to be committed, and some of it must
+# never be.
 
-# ── Python ───────────────────────────────────────────────────────────────
+# ── Secrets. Committing any of these publishes them. ──────────────────────────
+config/api_keys.json          # your Gemini API key, plus per-plugin credentials
+config/certs/                 # the dashboard's TLS private key and certificate
+config/whatsapp_web/          # a LINKED WhatsApp session — committing it hands
+                              # somebody your WhatsApp account, not just a key
+**/token*.json                # Google OAuth tokens (Gmail / Calendar plugins)
+**/client_secret*.json        # Google OAuth client secrets
+*credentials*.json
+.env
+.env.*
+
+# ── Personal data the assistant accumulates about you ─────────────────────────
+memory/long_term.json
+memory/*.db
+
+# ── Python build noise ────────────────────────────────────────────────────────
 __pycache__/
 *.py[cod]
+*$py.class
+*.so
+build/
+dist/
 *.egg-info/
+.eggs/
+
+# ── Virtual environments ──────────────────────────────────────────────────────
 .venv/
 venv/
 env/
+ENV/
 
-# ── Runtime state ────────────────────────────────────────────────────────
-memory/*.json
-*.log
-
-# ── Editor / OS ──────────────────────────────────────────────────────────
+# ── Editors and operating systems ─────────────────────────────────────────────
 .vscode/
 .idea/
+*.swp
+.DS_Store
 Thumbs.db
 desktop.ini
-*.bak
+
+# ── Runtime output ────────────────────────────────────────────────────────────
+*.log
+logs/
+downloads/
+screenshots/