Bring the checklist app under version control

The project has lived only as a folder on the Mac Studio and, briefly, as a
transfer tarball. This is the first commit: the Express server and its web
front end, the Capacitor iOS and Android wrappers, and the release and backup
scripts.

The repo is the source, not a backup of the machine. Left out on purpose, by
the .gitignore files that were already in the tree: node_modules, build output,
mobile/www (regenerated from server/public on every build), and server/data,
which holds the live checklists and belongs on the NAS rather than in git.

Every credential is excluded too — server/.env, the Play upload keystore and
its properties file, the App Store Connect key and ios-signing.config. The one
secret that was not in an ignored file was the NAS SSH password, hard-coded in
build-deploy.sh and grepped back out of it by backup-to-drive.sh. Both now read
it from the login keychain (service checklist-nas, account Christian), falling
back to NAS_PASS in the environment, so rotating it is one keychain entry
rather than a history rewrite.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

mobile/.gitignore

@@ -0,0 +1,47 @@
+# ── Secrets: never commit, never tarball ────────────────────────────────────────────
+# The upload key is the app's permanent identity on Play. Back both up off this Mac
+# (password manager / encrypted external drive) — not into a repo.
+keystore.properties
+ios-signing.config
+play-service-account.json
+keystore/
+*.jks
+*.keystore
+*.p12
+*.mobileprovision
+ExportOptions.plist
+
+# ── Generated: rebuilt by `npm run sync:web` on every release ───────────────────────
+# www/ is a disposable copy of ../server/public. Editing it is always a mistake — the
+# next sync wipes it. Change the web app instead.
+www/
+node_modules/
+
+# ── Build output ────────────────────────────────────────────────────────────────────
+build/
+dist/
+*.ipa
+*.aab
+*.apk
+*.dSYM.zip
+*.xcarchive
+
+# ── Machine-specific ────────────────────────────────────────────────────────────────
+android/local.properties
+android/.gradle/
+android/build/
+android/app/build/
+android/capacitor-cordova-android-plugins/build/
+.gradle/
+
+# ── Xcode / SPM ─────────────────────────────────────────────────────────────────────
+ios/App/build/
+ios/App/Pods/
+ios/App/App/public/
+ios/App/DerivedData/
+ios/.spm-cache/
+**/xcuserdata/
+**/*.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist
+.swiftpm/
+
+.DS_Store