chore: ignore git-sync.yaml and security.yaml

Both files are server-specific: git-sync.yaml contains an encrypted
token, security.yaml holds Grav nonces/salts. Neither should roam
across environments.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Vgmzx8VTTTmCskSpQtsLTr

.gitignore

@@ -4,3 +4,5 @@
 !/plugins/story-blocks/
 /data/
 /pages/01.trips/italy-2026-demo/
+/config/plugins/git-sync.yaml
+/config/security.yaml

config/security.yaml

@@ -1 +0,0 @@
-salt: HlC0NrX9QsYq1S