feat: update deployment configuration and encrypted env loader

- Update Ansible playbooks and roles for application deployment
- Add new Gitea/Traefik troubleshooting playbooks
- Update Docker Compose configurations (base, local, staging, production)
- Enhance EncryptedEnvLoader with improved error handling
- Add deployment scripts (autossh setup, migration, secret testing)
- Update CI/CD workflows and documentation
- Add Semaphore stack configuration

.gitignore

@@ -8,6 +8,8 @@ Thumbs.db
 # Build / Runtime
 vendor/
 .env
+.env.local
+.env.staging
 *.log
 *.retry
 x_ansible/.vault_pass
@@ -58,5 +60,5 @@ cookies_new.txt
 playwright-report/
 test-results/
 .playwright/
-# WireGuard client configs (generated locally)
-deployment/ansible/wireguard-clients/
+# WireGuard client configs (generated locally)
+deployment/ansible/wireguard-clients/