fix(submodules): mcp-proxmox on Gitea, drop spurious pmm-lps-publish link, ignore local secrets

- Point mcp-proxmox URL to gitea.d-bis.org and pin to 2b629ba (incl. test_auth)
- Remove cross-chain-pmm-lps-publish from index (worktree, not a parent submodule)
- .gitignore: worktree path, tmp/codex, operator env exports, select output/ noise

Made-with: Cursor

.gitignore

@@ -74,3 +74,27 @@ reconciliation/
 *.payload.json
 *.payload.sha256
 audit_log.jsonl
+
+# cross-chain-pmm-lps-publish: git worktree under that repo — not a parent submodule
+cross-chain-pmm-lps-publish/
+
+# Local scratch (never commit)
+.tmp-*.cjs
+.codex/
+.venv-checkjson/
+
+# Operator / runtime env snapshots under reports/ (sensitive; regenerate from hosts)
+reports/status/operator-*.env
+reports/status/operator-runtime*.env
+reports/status/chain138_aave_runtime.env
+reports/status/*runtime-env*.env
+reports/status/ei-matrix-eth-send*
+reports/status/token-aggregation-*.tar.gz
+config/production/*did-secrets.env
+
+# Bulky one-off local outputs (re-run scripts to restore)
+output/omnl-e2e-*.zip
+output/omnl-e2e-*/
+output/office22-*.zip
+output/settlement-events/
+output/transaction-package-*/

.gitmodules

@@ -4,7 +4,7 @@
 	# Primary integration remote is Gitea; use GitHub only as an optional mirror when available.
 [submodule "mcp-proxmox"]
 	path = mcp-proxmox
-	url = https://github.com/gilby125/mcp-proxmox.git
+	url = https://gitea.d-bis.org/d-bis/mcp-proxmox.git
 [submodule "smom-dbis-138"]
 	path = smom-dbis-138
 	url = git@github.com:Order-of-Hospitallers/smom-dbis-138.git