Build [v1.4.0] - Audit Dashboard & LDAP Restoration

These directories were already tracked before being added to .gitignore.
Removed 3350 cached files from git index via 'git rm --cached -r'.
Files remain on disk but are no longer tracked by git.

.gitignore

@@ -13,17 +13,26 @@ backend/venv/
 dist/
 build/
 
-# ── Runtime data (databases, configs w/ secrets) ─────────────
-data/
+# ── Runtime data directories ─────────────────────────────────
+# Content is excluded; the directories themselves are tracked via .gitkeep.
+# On fresh clone: run ./start_server.sh or docker compose up to initialize.
+
+/data/*
+!/data/.gitkeep
+/data/backups/
+
+/logs/*
+!/logs/.gitkeep
+
+# Duplicate runtime dirs that may exist inside backend/ (Docker legacy)
 backend/data/
 backend/logs/
-# LDAP config contains real server IPs and credentials — never commit
-# The active config is: backend/config/ldap_config.json (read by the app)
-# Duplicate/orphan copies are also excluded:
-backend/ldap_config.json
+
+# ── Sensitive configuration files ────────────────────────────
+# The ACTIVE LDAP config is: backend/config/ldap_config.json
+# It contains real server IPs and credentials — never commit.
+# The template/example IS committed and used by init_data.sh on fresh installs.
 backend/config/ldap_config.json
-backend/data/ldap_config.json
-# Keep example files tracked:
 !backend/config/ldap_config.json.example
 
 # ── Environment files (secrets) ──────────────────────────────
@@ -38,8 +47,12 @@ docker-compose.override.yml
 .env.docker
 
 # ── Application logs ─────────────────────────────────────────
-logs/
+# (also covered by /logs/* above, these catch any other locations)
 frontend/logs/
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
 
 # ── Frontend build artifacts ──────────────────────────────────
 frontend/.next/
@@ -56,10 +69,6 @@ frontend/public/icons/
 # ── npm / npx caches ─────────────────────────────────────────
 .npx_cache/
 scratch/npm_cache/
-*.log
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
 
 # ── Production bundles (generated by export_prod.sh) ─────────
 aInventory-PROD*/
@@ -78,3 +87,5 @@ aInventory-PROD*.zip
 *.key
 *.crt
 *.cert
+
+__push_ALL_to_remote.sh