# Allowlist: only what the image build needs. Everything else stays out,
# including token.json, client secrets and anything under tmp/.
*
!pyproject.toml
!uv.lock
!src/
!skills/
**/__pycache__
