feat: S3 Deep Dive, billing analysis mode, enhanced detection & dashboard

.gitignore

@@ -1,30 +1,51 @@
-# API keys and secrets — NEVER commit these
-SM_api_key
-*.key
-.env
-.env.*
-secrets/
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+
+# Ignore any .tfvars files that are generated automatically for each Terraform run. Most
+# .tfvars files are managed as part of configuration and so should be included in
+# version control.
+#
+# example.tfvars
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+#
+# !example_override.tf
 
-# Python virtual environment
-.venv/
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+plan.out
+.terraform.lock.hcl
+.DS_Store
+
+# Python
 venv/
-env/
 __pycache__/
 *.pyc
 *.pyo
-*.pyd
-.Python
 
-# Generated output files (re-created by pipeline)
+# Generated analysis outputs
 findings.json
+s3_analysis.json
+billing_report.json
 llm_report.json
 
-# macOS
-.DS_Store
+# Real AWS billing exports (contain account data — do not commit)
+costs.csv
+costs_with_s3.csv
 
-# IDE
-.vscode/
-.idea/
-
-# Zip archives
-*.zip
+# Sensitive credentials
+SM_api_key