wiki: ingest de-vds-3xui source chronicle + gitignore .tmp/.tasks/.lock

sources/de-vds-3xui-setup-2026-07-14.md (new) — session chronicle capturing
the 3x-ui 3.5.0 troubleshooting: login 403 = CSRFMiddleware (X-CSRF-Token,
GET {BP}csrf-token), direct DB insert into inbounds no longer renders
(client model split across clients/client_inbounds/client_traffics → use
panel API add with stringified settings), wrapper `x-ui setting` doesn't
persist creds (binary only). Reference JSON lifted from working nl-vds 32030.
Entity sources: bound. +index.md sources line, +log.md ingest entry.
gitignore: .tmp/ (cred-bearing local throwaway, like .scratch/) and
.tasks/.lock (runtime). .tmp/ removed from disk.

Co-Authored-By: Claude <noreply@anthropic.com>

.gitignore

@@ -31,3 +31,10 @@ pilonuxt-home-smoke.jpeg
 
 # harness scratchpad (plan-mode plans, session artifacts) — not project code
 .zcode/
+
+# local throwaway scratch (plink scripts, recon dumps) — часто содержит креды,
+# никогда не commit. Аналог .scratch/.
+.tmp/
+
+# task-runner runtime lock (not project content)
+.tasks/.lock