start project

.gitignore

@@ -1,6 +1,9 @@
 # Environment / secrets
-.env
-.env.local
+# Glob, not just ".env": local backups (.env.backup-*, .env.prod, .env.bak)
+# hold the same credentials and must never be committed.  .env.example is the
+# only member of the family that is safe, so it is re-included explicitly.
+.env*
+!.env.example
 *.pem
 *.key
 
@@ -22,6 +25,12 @@ node_modules/
 frontend/dist/
 npm-debug.log*
 
+# Test artefacts
+frontend/test-results/
+frontend/playwright-report/
+frontend/blob-report/
+frontend/coverage/
+
 # Editors / OS
 .vscode/
 .idea/