chore(ops): ignore .env.* profiles + add batch ingest script

- .gitignore: ignore .env.* (keep .env.example) so local DB-credential
  profiles like .env.jetson-ingest can never be staged (audit S-1).
- ingest_all.sh: batch-ingest helper writing to the Jetson DB via SSH tunnel.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.gitignore

@@ -18,6 +18,8 @@ build/
 
 # Environment secrets — NEVER commit
 .env
+.env.*
+!.env.example
 
 # Type-checker and linter caches
 .mypy_cache/