- .gitignore: ignore .env.* (keep .env.example) so local DB-credential
profiles like .env.jetson-ingest can never be staged (audit S-1).
- ingest_all.sh: batch-ingest helper writing to the Jetson DB via SSH tunnel.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>