rewrite

.gitignore

@@ -1,2 +1,28 @@
 build/
-bin/
+bin/
+
+# Generated by the server product before the wasm build, from the same route
+# table and Post model the pages use (see .forgejo/workflows/deploy.yaml).
+# Checked-in copies drift: the committed sitemap.xml that used to live here
+# still listed three blog posts that no longer exist.
+sitemap.xml
+feed.xml
+
+# Post media, mirrored from the source instances by tools/fetch-media.sh.
+# Content-addressed, so re-running is cheap and only new files download. Kept out
+# of git because it is tens of megabytes of binaries that are reproducible from
+# content/posts.json — but see deploy/README.md: on the server it lives OUTSIDE
+# the rsync --delete target, because a source instance deleting a file makes it
+# unreproducible.
+media/
+
+# Runtime order state — belongs in /var/lib/catcrafts in production and in a
+# temp dir under dev.sh/e2e; never in the repo, never in the web root.
+orders.jsonl
+*.fake-paid
+bunq-state.json
+
+.env
+
+# Local Claude Code permissions — dev-machine tooling config, not project code.
+.claude/