🔧 Apply template updates from /tmp/templates/go 🔧

Sync project with updated upstream template files while preserving all
Go-specific customizations (EXEC_CMD_BIN='', DATA_DIR='', Go env vars,
/data/go symlink, Go-named dirs, etc.).
- .env.scripts: bump version stamp to 202605292219-git
- .gitattributes: update date stamp from template
- .gitea/workflows/docker.yaml: replace bare echo with printf %q for
GITHUB_OUTPUT assignments; use local var assignments for docker org/tag
- .gitignore: expand with editor configs (VSCode/JetBrains/Vim), AI tool
configs (Claude/.cursor/Copilot), env/secrets, build artifacts,
dependency dirs, logs, test/coverage dirs from updated template
- Dockerfile: bump BUILD_DATE to 202605292219; fix PHP_FPM detection from
ls subshell to set -- glob pattern; fix systemd cleanup to use for loop
instead of rm -f $(ls | grep -v ...)
- rootfs/root/docker/setup/00-init.sh through 07-cleanup.sh: update
version/date stamps to 202605292220-git template versions
- rootfs/usr/local/bin/entrypoint.sh: update stamp; fix echo quoting to
use double quotes for CONTAINER_NAME expansion
- rootfs/usr/local/etc/docker/init.d/00-go.sh: apply template improvements:
split SIGPWR trap onto separate line with 2>/dev/null || true; expand
debugger setup to multi-line if/else; use $(<file) instead of cat for
old_pid; apply _script_hash invalidation (W14) before START_SCRIPT
generation; replace heredoc/eval approach with printf %q for safe
quoting; launch START_SCRIPT with bash not eval sh -c (W15); add null
guard on chown in __run_secure_function; use _resolved temp var pattern
for type -P resolution (remove SERVICE_PID_NUMBER); explicit
[ "$1" = "check" ] guard on __check_service; errorCode=${PIPESTATUS[0]};
fix command -v pre check; add grep -- separator; fix ps|awk|grep chain
to pure awk; remove duplicate mkdir block
- rootfs/usr/local/share/template-files/config/env/default.sample:
ENTRYPOINT_PID_FILE path /run/.entrypoint.pid → /run/init.d/entrypoint.pid
- rootfs/usr/local/share/template-files/config/env/examples/zz-entrypoint.sh:
same ENTRYPOINT_PID_FILE path fix

Dockerfile
.env.scripts
.gitattributes
.gitea/workflows/docker.yaml
.gitignore
rootfs/root/docker/setup/00-init.sh
rootfs/root/docker/setup/01-system.sh
rootfs/root/docker/setup/02-packages.sh
rootfs/root/docker/setup/03-files.sh
rootfs/root/docker/setup/04-users.sh
rootfs/root/docker/setup/05-custom.sh
rootfs/root/docker/setup/06-post.sh
rootfs/root/docker/setup/07-cleanup.sh
rootfs/usr/local/bin/entrypoint.sh
rootfs/usr/local/etc/docker/init.d/00-go.sh
rootfs/usr/local/share/template-files/config/env/default.sample
rootfs/usr/local/share/template-files/config/env/examples/zz-entrypoint.sh

.gitignore

@@ -1,4 +1,4 @@
-# gitignore created on 04/22/26 at 19:23
+# gitignore created on 05/29/26 at 22:20
 # Disable reminder in prompt
 ignoredirmessage
 
@@ -6,10 +6,12 @@ ignoredirmessage
 **/.build_failed*
 
 # OS generated files
+
 ### Linux ###
+# Backup files left by editors
 *~
 
-# temporary files which can be created if a process still has a handle open of a deleted file
+# Temporary files left when a process holds an open handle to a deleted file
 .fuse_hidden*
 
 # KDE directory preferences
@@ -18,11 +20,11 @@ ignoredirmessage
 # Linux trash folder which might appear on any partition or disk
 .Trash-*
 
-# .nfs files are created when an open file is removed but is still being accessed
+# NFS stale file handles
 .nfs*
 
 ### macOS ###
-# General
+.DS_Store
 .DS_Store?
 .AppleDouble
 .LSOverride
@@ -46,20 +48,23 @@ Network Trash Folder
 Temporary Items
 .apdisk
 
-### macOS Patch ###
 # iCloud generated files
 *.icloud
 
 ### Windows ###
-# Windows thumbnail cache files
 Thumbs.db
 Thumbs.db:encryptable
 ehthumbs.db
 ehthumbs_vista.db
 
-# Dump file
+# Crash dump files
 *.stackdump
 
+# Core dumps (Linux/macOS)
+core
+core.*
+vgcore.*
+
 # Folder config file
 [Dd]esktop.ini
 
@@ -73,20 +78,146 @@ $RECYCLE.BIN/
 *.msm
 *.msp
 
-# misc
-!*/README*
-!inc/main.bash
-
 # Windows shortcuts
 *.lnk
 
-# ignore commit message
+### Editors ###
+# Visual Studio Code
+.vscode/
+!.vscode/extensions.json
+
+# JetBrains IDEs (IntelliJ, GoLand, RustRover, PyCharm, etc.)
+.idea/
+*.iml
+*.iws
+*.ipr
+
+# Vim / Neovim
+*.swp
+*.swo
+.netrwhist
+Session.vim
+.vim/
+
+# Sublime Text
+*.sublime-workspace
+*.sublime-project
+
+# Eclipse / generic Java IDEs
+.project
+.classpath
+.factorypath
+.settings/
+
+### AI tool local configs (personal settings, never commit) ###
+# Claude Code
+.claude/settings.local.json
+.claude/*.lock
+
+# Cursor
+.cursor/
+.cursorignore
+.cursorindexingignore
+
+# GitHub Copilot
+.copilot/
+
+# Codeium
+.codeium/
+
+# Tabnine
+.tabnine/
+
+# Aider
+.aider/
+.aider.conf.yml
+.aider.model.settings.yml
+.aiderignore
+
+# General AI assistant local state
+.ai/
+.ai.local/
+
+### Environment and secrets ###
+# Local env overrides — never commit credentials
+.env
+.env.local
+.env.*.local
+
+# Private keys and certificates
+*.pem
+*.key
+*.p12
+*.pfx
+
+### Build artifacts ###
+build/
+dist/
+out/
+
+# Rust
+target/
+
+# C / C++ / compiled objects
+*.o
+*.a
+*.so
+*.dylib
+*.dll
+*.exe
+
+### Dependency directories ###
+# Node
+node_modules/
+
+# Go (vendored deps are sometimes committed intentionally, so gitignore only the cache)
+# vendor/
+
+# Python
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.Python
+*.egg-info/
+.eggs/
+.venv/
+venv/
+env/
+
+### Logs ###
+*.log
+logs/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+### Temporary and cache ###
+tmp/
+.tmp/
+*.tmp
+*.cache
+.cache/
+
+### Test and coverage ###
+coverage/
+.coverage
+*.cover
+*.coverprofile
+htmlcov/
+.nyc_output/
+.pytest_cache/
+.tox/
+
+### Misc — always allow ###
+!*/README*
+!inc/main.bash
+
+### Project-specific patterns ###
+# ignore commit message files
 **/.gitcommit
 
-# ignore .build_failed files
-**/.build_failed*
-
-# ignore .bak files
+# ignore backup files
 **/*.bak
 
 # ignore .no_push files
@@ -95,10 +226,16 @@ $RECYCLE.BIN/
 # ignore .no_git files
 **/.no_git
 
-# ignore .installed files
+# ignore .installed marker files
 **/.installed
 
-# ignore work in progress files
+# ignore work-in-progress rewrite/refactor scripts
 **/*.rewrite.sh
 **/*.refactor.sh
 
+# ignore local override scripts and configs
+**/*.local.sh
+**/*.local.conf
+**/*.local.yaml
+**/*.local.yml
+