chore: gitignore the agent memory folder and code-graph artifact

`memory/` and `.codebase-memory/` were only ignored through an
uncommitted working-tree edit, so the protection did not survive a fresh
clone: anyone running `git add -A` there would have swept the markdown
brain — which records deploy hosts, box addresses and workflow notes —
straight into a public repo. Commit the rules so they actually hold.

`memory/` is deliberately local. `.codebase-memory/` is a regenerable
binary index with no value in git.

Also adds `.cbmignore` (extra exclusions for the code-graph indexer, so it
stops walking vendored and scratch directories) and ignores a stray
`frontend;C/` directory left behind by a malformed shell redirect.

Audited before committing: nothing ignored is currently tracked, and no
maintainer identifiers are present in the tree.

Author: DaveBugg

.cbmignore

@@ -0,0 +1,38 @@
+# Extra exclusions for codebase-memory-mcp, layered on top of .gitignore.
+# Goal: keep search_graph free of dead symbols from vendored code, build
+# output, and maintainer scratch space.
+
+# Vendored / generated
+node_modules/
+frontend/dist/
+backend/dist/
+build/
+dist/
+
+# Local backup of the pre-public git history — full duplicate of the tree.
+# Indexing it would double every symbol.
+.git.bak/
+
+# Maintainer scratch space (throwaway SSH runners, deploy tarballs)
+.claude_temp/
+
+# Stray empty dir from a malformed shell redirect; safe to delete
+frontend;C/
+
+# Backups / snapshots
+*.bak
+*.bak*
+*.orig
+*.old/
+*_bak_*/
+
+# Agent state
+.serena/
+.claude/
+.cursor/
+.playwright-mcp/
+
+# Runtime data / archives (already gitignored, repeated for safety)
+data/
+*.zip
+*.tar.gz

.gitignore

@@ -108,6 +108,19 @@ desktop.ini
 .continue/
 .playwright-mcp/
 
+# The markdown "brain" — durable project facts (architecture maps, deploy
+# hosts, known issues, release log) that agents read at session start.
+# Same reason as above: it records the maintainer's specific infrastructure
+# and workflow, which has no place in a public repo.
+memory/
+
+# Code-graph artifact built by codebase-memory-mcp. Regenerable in seconds
+# via index_repository; binary blob, no value in git.
+.codebase-memory/
+
+# Stray directory created by a malformed shell redirect on Windows.
+frontend;C/
+
 # ── Misc ─────────────────────────────────────────────────────────────────────
 /tmp/
 *.tmp