governance: add .gitignore housekeeping and regular audits; implement audit script and CI step; update templates, proposal, and docs

collab/proposals/01-codexhelper.llm.md

@@ -19,6 +19,8 @@
 - Planning/Architecture Governance: plan ahead via Questions→Proposal→Plan; maintain a global architecture/module map; implement module-by-module; avoid refactors except when assumptions change and plans/docs are updated.
 - Clean Root Governance: keep repo root minimal; organize assets under `docs/`, `templates/`, `collab/`, `prompts/`, `modes/`, `scripts/`, `meta/`.
 - CI/Containers Governance: use Gitea Actions with local parity via Docker Compose; do work inside containers; host for git/tea + Docker orchestration; dependencies via Docker; explicit names/cleanup.
+ - .gitignore Governance: maintain `.gitignore` with `runs/` and OS ignores across repos and generated projects.
+ - Audits Governance: run audits regularly; prompt before releases; record under `docs/audits/`; enforce via CI step.
 - Phase 1 acceptance:
   - new-mode creates mode skeleton
   - new-project scaffolds without overwrites
@@ -33,6 +35,7 @@
   - clean root: root remains minimal; scaffolding organizes assets under subdirectories
   - ci/containers: Gitea Actions and local Docker Compose run identical workflows; explicit names and cleanup verified
   - project CI: scaffold includes `.gitea/workflows/ci.yml`, `docker/compose.yml`, `docker/test/Dockerfile`, and `scripts/test.docker.sh`
+  - audits: audit script present and run in CI; reports recorded in repo when performed
   - ci/containers: Gitea Actions and local Docker Compose run identical workflows; explicit names and cleanup verified
 \n+## Approval — Tick All That Apply