Initial public release

A chezmoi-based fleet-dotfiles template for macOS workstations:

- Two-way auto-sync via launchd watcher + 5-min puller
- Mesh SSH via modify_authorized_keys driven by .chezmoidata/fleet.yaml
- age-encrypted secrets file
- Bundled Claude Code agentic team (11 agents) + /lite + /lite-sub commands
- Verify-before-claiming Stop hook
- Generic statusline + project-boundary validate-path hook
- Reference launchd plist for cross-fleet task-durations aggregation
  (companion repo: gitea.tojo.team/cardinale/task-durations)
- AGENTS.md walks an agent through the entire setup Q&A interactively
- docs/ covers architecture, security model, fleet onboarding

.chezmoiignore

@@ -0,0 +1,68 @@
+# Documentation lives in the repo but is not deployed to $HOME
+docs
+README.md
+AGENTS.md
+
+# Reference scripts that are not auto-deployed
+disabled
+
+# Editor and OS clutter
+.DS_Store
+*.swp
+*~
+
+# Machine-specific SSH files — each machine keeps its own identity
+.ssh/id_ed25519
+.ssh/id_ed25519.pub
+.ssh/id_rsa.pub
+.ssh/known_hosts
+.ssh/known_hosts.old
+
+# Python artifacts — platform-specific, should not be synced
+**/__pycache__
+**/*.pyc
+**/venv
+
+# Claude Code runtime state — machine-local
+.claude/plugins/cache
+.claude/projects
+.claude/debug
+.claude/sessions
+.claude/backups
+.claude/shell-snapshots
+.claude/history.jsonl
+.claude/statsig
+.claude/stats-cache.json
+.claude/telemetry
+.claude/tasks
+.claude/todos
+.claude/file-history
+.claude/paste-cache
+.claude/session-env
+
+# Codex runtime state
+.codex/sessions
+.codex/history.jsonl
+.codex/shell_snapshots
+.codex/memories
+.codex/log
+.codex/logs_*.sqlite
+.codex/state_*.sqlite
+.codex/sqlite
+.codex/tmp
+.codex/auth.json
+.codex/vendor_imports
+
+# Gemini runtime state
+.gemini/history
+.gemini/tmp
+.gemini/oauth_creds.json
+.gemini/google_accounts.json
+.gemini/installation_id
+.gemini/state.json
+.gemini/projects.json
+.gemini/trustedFolders.json
+
+# Stale backup files
+*.bak
+*.bak.*