chore: untrack Playwright MCP captures and root screenshot; trim docker build context

Also records the gitea runner durable fix in the launch checklist.

docs/launch-checklist.md

@@ -76,8 +76,14 @@ but `act_runner`'s bind mount of `/var/run/docker.sock` points at the dead socke
 job fails in its first second with `Cannot connect to the Docker daemon`. Happened 2026-10-21 →
 discovered 2026-10-23.
 - **Workaround:** `sudo docker restart act_runner` on gitea-1.
-- [ ] Durable fix in the `gitea` ansible role: disable live-restore on that VM, or restart the
-      runner after dockerd restarts (systemd `PartOf=`/`ExecStartPost` hook).
+- [x] Durable fix in the `gitea` ansible role (2026-10-23): a `docker.service` drop-in
+      (`/etc/systemd/system/docker.service.d/restart-act-runner.conf`, template
+      `docker-restart-act-runner.conf.j2`) whose `ExecStartPost` restarts `act_runner` whenever
+      dockerd starts. Live-restore stays on, so Gitea itself keeps running through dockerd restarts.
+- [ ] Apply it: run `gitea-deploy.yml` (daemon-reload only, nothing restarts), then confirm with
+      `systemctl show docker -p DropInPaths` on gitea-1. Optional proof, when no CI job is running:
+      `sudo systemctl restart docker` and check `docker inspect -f '{{.State.StartedAt}}' act_runner`
+      moved forward.
 
 ### 1.4 `/insights/` ✅ 2026-10-23
 Now a reader-facing "Coming soon" page (hero + contact CTA); the developer-facing cards are gone.
@@ -95,10 +101,12 @@ Anything added to `src/components/Analytics.astro` must be disclosed on `/privac
 The stale assertions (invented copy removed by the exact-copy work) now check the real headings
 and use the header Services link; the homepage body has no direct `/services/` link.
 
-### 2.2 Repo hygiene
-Commit `9f1cbca` committed ~50 `.playwright-mcp/` screenshots/snapshots plus a 2.8 MB
-`home-full.png` at the repo root.
-- [ ] Add `.playwright-mcp/` to `.gitignore`; remove the tracked artifacts and `home-full.png`.
+### 2.2 Repo hygiene ✅ 2026-10-23
+Commit `9f1cbca` had committed 51 `.playwright-mcp/` screenshots/snapshots plus a 2.8 MB
+`home-full.png` at the repo root. Now untracked (files kept on disk) and ignored:
+`.gitignore` has `.playwright-mcp/` and `/*.png`; `.dockerignore` also drops them plus
+`planning/` and `tests/` from the build context. History was not rewritten (`.git` is 17 MB —
+not worth a force-push).
 
 ### 2.3 DMARC tightening
 - [ ] Tighten DMARC from `p=none` to `p=quarantine` after a few weeks of clean reports