fix(security): add .mcp.json and opencode.json to .gitignore (#17)

Prevent MCP configuration files containing API tokens from being
tracked. These files are generated by `dvmi sync-config-ai` and
must remain local-only.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: savez

.gitignore

@@ -56,3 +56,7 @@ Desktop.ini
 .claude/
 specs/
 TODO.md
+
+# ─── MCP / AI tool configs (contain tokens) ─────────────────────────────────
+.mcp.json
+opencode.json