Harden .gitignore and drop hardcoded home paths before publishing

The repo is about to be pushed to a remote, so this covers what should never
travel with it and what should not be baked into the source.

.gitignore now covers credentials (.env, keys, tokens, .netrc), host-local
config (*.local.json), the SQLite telemetry store and its WAL sidecars, logs,
benchmark and sweep output, and the timestamped .bak files this project has
accumulated before. Verified that no currently tracked file is caught by the
new patterns.

Also removed /home/drjones from tracked source, which an ignore file cannot
help with. BASE_DIR now derives from the module's own location, the ComfyUI
model directory falls back to ~/ComfyUI/models, and start_manager.sh resolves
its interpreter through $HOME with a python3 fallback. All three still resolve
to exactly the same paths on this machine; they just no longer hardcode one
user's home directory into a published repository.

Note for the record: the git history was scanned across all refs and contains
no credentials. The password visible in `git remote -v` lives only in
.git/config, which is never pushed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

start_manager.sh

@@ -1,4 +1,7 @@
 #!/usr/bin/env bash
+# Launch the HyperSwap server. Override HYPERSWAP_PYTHON to use a different interpreter.
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 cd "$SCRIPT_DIR"
-exec /home/drjones/comfy-mcp-venv/bin/python server.py
+PYTHON="${HYPERSWAP_PYTHON:-$HOME/comfy-mcp-venv/bin/python}"
+[ -x "$PYTHON" ] || PYTHON="$(command -v python3)"
+exec "$PYTHON" server.py