fix(security): Sprint 1 — path traversal, SSRF, Docker hardening, error exposure

chore: add node_modules and package-lock.json to .gitignore

chore: ignore SQLite runtime database files (*.db, *.sqlite)

Sprint 1 — Setup initial : arborescence, schémas Pydantic, profils JSON, prompts, tests