Sync broccolini-bot: rename from zammad, docs in docs/, security gitignore, remove zammad deps

Co-authored-by: Cursor <cursoragent@cursor.com>

.gitignore

@@ -1,13 +1,21 @@
 # Dependencies
 node_modules/
 
-# Environment / Secrets (keep .env.example committed for new deploys)
+# Documentation: docs/ is committed (all .md except README.md live in docs/)
+
+# Environment / Secrets (keep .env.example and .env.test.example committed; never commit .env or .env.test)
 .env
 .env.*
 !.env.example
+!.env.test.example
+# Explicit so test env is never committed; agents must not modify .env without user confirmation
+.env.test
+# Local backup of .env (do not commit)
+.env.backup
 
-# SQLite databases (legacy, migrated to MongoDB)
-*.sqlite
+# GitLab / SSH (do not commit keys)
+gitlab
+gitlab.pub
 
 # OS files
 .DS_Store
@@ -23,5 +31,20 @@ npm-debug.log*
 *.swp
 *.swo
 
-# Misc
-backup-sqlite/
+toolbox
+.cursor/
+
+# Custom bot project docs (internal reference; do not commit)
+custombotproject/
+
+# Private keys and credential files (do not commit)
+*.pem
+credentials.json
+token.json
+token.pickle
+
+# ngrok (run from ~/ngrok; do not commit config or tokens)
+ngrok.yml
+cursor.yml
+*.local.yml
+