Adopt IA version-control gitignore; stop tracking local-scope keystores and migration logs

.gitignore

@@ -1,19 +1,80 @@
+# ---------------------------------------------------------------------------
+# Ignition 8.3 gateway-as-files. commissioning.json, config/ and projects/ are
+# bind-mounted from ignition/gateway/. Commit the authored configuration and
+# projects; ignore what the gateway maintains for itself or that is specific to
+# one instance.
+#
+# The first block is Inductive Automation's recommended .gitignore, verbatim:
+# https://docs.inductiveautomation.com/docs/8.3/tutorials/version-control-guide
+# Note that **/request, **/response, **/var and **/logs match a file or folder
+# of that name ANYWHERE, including inside a project. If a project resource is
+# ever named that way, negate it below with a leading "!".
+# ---------------------------------------------------------------------------
+
+# Database files
+**/db/
+**/metricsdb/
+**/autobackup/
+**/db_backup_sqlite.idb
+**/valueStore.idb
+
+# Cache and temporary files
+**/jar-cache/
+**/request
+**/response
+*.tmp
+*.bak
+**/var
+
+# Log files
+*.log
+**/logs
+
+# Certificates and security
+**/certificates/
+**/keystore/
+
+# Runtime configuration (environment-specific)
+**/config/local
+**/config/resources/local
+
+# Gateway-specific runtime files
+**/.container-init.conf
+
+# Backup and converted files
+**/conversion-report.txt
+**.digest.json
+
+# Project conversion artifacts
+**/projects/conversion-report.txt
+**/migration-log-*.md
+**/.resources/
+
+# Alarm history files
+**/.alarms_*
+
+# ---------------------------------------------------------------------------
+# Repo-specific additions
+# ---------------------------------------------------------------------------
+
 # Gateway API token (mint with: python3 tools/provision.py mint-token)
 .env
+
 # MariaDB password read by the 'local' file secret provider (written by provision.py)
 ignition/gateway/config/secrets/
-# Fresh-reset rollback copy
-ignition/gateway.bak/
-# Gateway-maintained content-addressed caches + probe output (never author/commit)
-ignition/gateway/**/.resources/
+
+# Gateway probe output (never author/commit)
 ignition/gateway/projects/.probe/
-__pycache__/
-.pytest_cache/
-# Gateway/Designer runtime churn (ONBOARDING §6) — never commit
-ignition/gateway/config/ignition/tags/valueStore.idb
-ignition/gateway/config/resources/local/ignition/local-system-properties/
-ignition/gateway/config/resources/migration-log-*.md
+
 # Designer save artifacts
 ignition/gateway/projects/**/thumbnail.png
+
+# Fresh-reset rollback copy (README "Reset" workflow)
+ignition/gateway.bak/
+
 # Harvested component schemas (regenerate with tools/schema_harvest.sh)
 .schemas/
+
+# Python tooling
+__pycache__/
+.pytest_cache/