phase 1: stop the bleeding — untrack 91 files, add verifier, harden CI

- Remove 91 tracked-but-gitignored files from index (sessions, plugin
  data/manifests, pycache, memory-changes, obsidian state, credential
  notes). Disk files preserved via --cached.
- Add .gitignore rules: .qmd/, .memory-index.lock, *.sqlite-wal/shm,
  13 credential note paths.
- Remove filename-blacklist ignore patterns (**/*password*.md etc.)
  that caught nothing and misfired on normal notes.
- Add .scripts/verify-vault.mjs: scans git-tracked files for key
  patterns (sk-*, AKIA*, gh[pousr]_*, glpat-*, xox*, BEGIN PRIVATE
  KEY) and 64-char hex in plugin .json files.
- Add verifier step to CI lint workflow before dependency install.

.obsidian/plugins/templater-obsidian/data.json

@@ -1,32 +0,0 @@
-{
-  "data_version": 2,
-  "command_timeout": 5,
-  "templates_folder": "06_Metadata/Templates",
-  "templates_pairs": [],
-  "trigger_on_file_creation_mode": "folder",
-  "auto_jump_to_cursor": false,
-  "jump_to_cursor_after_file_name": false,
-  "shell_path": "",
-  "user_scripts_folder": "",
-  "folder_templates": [
-    {
-      "folder": "00_Inbox",
-      "template": "06_Metadata/Templates/Daily Note Template.md"
-    },
-    {
-      "folder": "01_Projects",
-      "template": "06_Metadata/Templates/Project Template.md"
-    },
-    {
-      "folder": "03_Resources/Books",
-      "template": "06_Metadata/Templates/book-note.md"
-    }
-  ],
-  "file_templates": [],
-  "syntax_highlighting": true,
-  "syntax_highlighting_mobile": false,
-  "enabled_templates_hotkeys": [],
-  "startup_templates": [],
-  "intellisense_render": "1",
-  "ignore_folders_on_creation": []
-}

.obsidian/plugins/templater-obsidian/manifest.json

@@ -1,17 +0,0 @@
-{
-    "id": "templater-obsidian",
-    "name": "Templater",
-    "version": "2.25.0",
-    "description": "Advanced templating and automation using handlebars-like syntax.",
-    "minAppVersion": "1.13.0",
-    "author": "SilentVoid",
-    "authorUrl": "https://github.com/SilentVoid13",
-    "fundingUrl": {
-        "GitHub Sponser (Zachatoo, maintainer)": "https://github.com/sponsors/Zachatoo",
-        "Ko-fi (Zachatoo, maintainer)": "https://ko-fi.com/zachatoo",
-        "GitHub Sponser (SilentVoid13, creator)": "https://github.com/sponsors/SilentVoid13",
-        "Paypal (SilentVoid13, creator)": "https://www.paypal.com/donate?hosted_button_id=U2SRGAFYXT32Q"
-    },
-    "helpUrl": "https://silentvoid13.github.io/Templater/",
-    "isDesktopOnly": false
-}