Updated GitIgnore, Explicit allow rules for secrets

.gitignore

@@ -2,12 +2,17 @@
 result
 result-*
 
-# sops age keys (never commit private keys)
+# Ignore everything in the secrets directory
-*.age
+secrets/*
-keys.txt
-!keys.txt.age
 
-# Explicitly (dis)allow specific keys/secrets
+# Explicitly allow ONLY these files
+!secrets/secrets.yaml
+!secrets/keys.txt.age
+!secrets/ssh-github
+!secrets/ssh-key
+
+# Explicitly block the plain text keys (even if the rule above changes)
+secrets/keys.txt
 secrets/ssh-private
 
 # macOS