chore: ignore temp SSH keys and env files

Keep .codex-temp-keys/ (local SSH key) and .env out of git and the
Docker build context so they never reach a commit or image layer.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.dockerignore

@@ -9,3 +9,10 @@ index.original.html
 .claude
 .vscode
 .idea
+
+# Secrets / not needed in the image
+.codex-temp-keys
+.env
+*.pem
+*_ssh_key
+worker

.gitignore

@@ -3,3 +3,11 @@ dist
 .DS_Store
 *.log
 .vite
+
+# Secrets / local-only
+.codex-temp-keys/
+.env
+.env.*.local
+*.pem
+*_ssh_key
+*_ssh_key.pub