security: Add sensitive files to .gitignore

- Add .env.phase1, .env.phase1.bak to .gitignore
- Add .env.production, .env.deployment patterns
- Add orig/ directory to prevent backup files with secrets
- Add *.bak and *.env patterns
- Remove sensitive files from git tracking

These files contained exposed private keys and API credentials.
Local files preserved, only removed from version control.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

.gitignore

@@ -0,0 +1,77 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool
+*.out
+
+# Go workspace file
+go.work
+
+# Dependency directories
+vendor/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# Environment variables (CRITICAL: Never commit secrets)
+.env
+.env.local
+.env.*.local
+.env.phase1
+.env.phase1.bak
+.env.production
+.env.deployment
+*.env
+
+# Wallet and key files (CRITICAL: Never commit private keys)
+.wallet_info.txt
+*.key
+*.pem
+*.crt
+private_keys/
+
+# Legacy/backup directories (CRITICAL: May contain exposed secrets)
+orig/
+backup/
+*.bak
+
+# Build output
+build/
+bin/
+dist/
+
+# Logs
+*.log
+logs/
+
+# Metrics data
+*.prometheus
+metrics/
+
+# Temporary files
+tmp/
+temp/
+*.tmp
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# Docker
+docker-compose.override.yml
+
+# Coverage
+coverage.html
+coverage.out
+coverage/