ops: apply Traefik office allowlist for git and n8n UIs

Co-authored-by: Cursor <cursoragent@cursor.com>

.gitignore

@@ -17,6 +17,32 @@ dist/
 
 # local ops noise
 scripts/dokploy-shots/
+# one-shot cutover / debug (kept locally; not for main)
+scripts/dokploy_cleanup_and_sql.py
+scripts/dokploy_configure_deploy_portal.py
+scripts/dokploy_create_and_deploy_portal.py
+scripts/dokploy_cutover_portal.py
+scripts/dokploy_deploy_portal_now.py
+scripts/dokploy_env_reveal_save.py
+scripts/dokploy_finalize_portal.py
+scripts/dokploy_find_app_host.py
+scripts/dokploy_find_supabase.py
+scripts/dokploy_inspect_env.py
+scripts/dokploy_inspect_portal.py
+scripts/dokploy_inventory_domains.py
+scripts/dokploy_redeploy_portal.py
+scripts/dokploy_retarget_traefik.py
+scripts/dokploy_run_creatives_sql.py
+scripts/dokploy_set_env_and_ops.py
+scripts/dokploy_sql_terminal_b64.py
+scripts/dokploy_sql_via_terminal.py
+scripts/dokploy_stop_orphan.py
+scripts/dokploy_traefik_cm.py
+scripts/dokploy_traefik_expand.py
+scripts/dokploy_traefik_insert.py
+scripts/dokploy_traefik_only.py
+scripts/dokploy_traefik_unlock.py
+scripts/dokploy_view_deploy_error.py
 tsconfig.tsbuildinfo
 
 # debug / OS