chore: harden .gitignore and untrack sensitive/build artifacts

- Untrack developerID_application.cer (Apple Developer certificate
  should never live in a public repo - Fastlane/CI fetches at build time)
- Untrack tsconfig.*.tsbuildinfo (build cache, causes merge conflicts)
- Expand .gitignore to block all cert/key/provisioning extensions
  (*.cer, *.pem, *.p12, *.p8, *.key, *.mobileprovision, etc.)
- Add .env.* allowlist pattern so future env files are blocked by default
- Move hardcoded Apple ID out of fastlane/Appfile to ENV-only
- Replace personal email in fastlane/.env.example with placeholder

Author: AnasProgrammer2

.gitignore

@@ -1,19 +1,44 @@
+# Dependencies & build output
 node_modules/
 out/
 dist/
+
+# Build cache
+*.tsbuildinfo
+
+# Environment files — NEVER commit real secrets
 .env
+.env.*
+!.env.example
 *.local
+
+# OS junk
 .DS_Store
+Thumbs.db
 
 # Database files — never commit user data
 *.db
 *.sqlite
 *.sqlite3
 
+# Signing certificates / provisioning / keys — NEVER commit
+*.cer
+*.crt
+*.pem
+*.p12
+*.p8
+*.key
+*.keystore
+*.jks
+*.mobileprovision
+*.provisionprofile
+resources/embedded.provisionprofile
+
 # AI tool config (local dev tools)
 CLAUDE.md
 .claude/
 .cursor/
+.agents/
 
 # Fastlane
 fastlane/.env
@@ -23,5 +48,14 @@ fastlane/screenshots
 fastlane/test_output
 Gemfile.lock
 
-# MAS provisioning profile — generated during CI, never commit
-resources/embedded.provisionprofile
+# Logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Editor
+.idea/
+.vscode/
+*.swp
+*.swo

fastlane/Appfile

@@ -1,3 +1,3 @@
 app_identifier "com.netcopilot.app"
-apple_id ENV["APPLE_ID"] || "your-apple-id@example.com"
-team_id "FC2U7NZKXV"
+apple_id ENV["APPLE_ID"]
+team_id ENV["APPLE_TEAM_ID"] || "FC2U7NZKXV"