Improve .gitignore: full audit compliance + secrets protection

.gitignore

@@ -1,2 +1,74 @@
+# System / Editor
 .DS_Store
+Thumbs.db
+*.swp
+*.swo
+
+# Logs
 *.log
+logs/
+
+# Temp-Dateien (verhindert Audit-Warnung)
+*.tmp
+temp.txt
+temp.tmp
+temp.log
+tmp/
+
+# Scratch / Working directories
+scratch/
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+.venv/
+venv/
+env/
+ENV/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+
+# Node.js
+node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.npm/
+.yarn/
+.pnp.*
+
+# Env / Secrets (NIEMALS pushen!)
+.env
+.env.local
+.env.*.local
+.env.development
+.env.production
+*.pem
+*.key
+credentials.json
+service-account*.json
+
+# IDE / Project metadata
+.idea/
+.vscode/
+*.iml
+*.ipr
+*.iws
+.project
+.classpath
+.settings/
+
+# Build artifacts
+dist/
+build/
+target/
+*.egg-info/
+*.whl
+
+# OS temp files
+.tmp/
+.cache/