chore: update package-lock and gitignore template

Author: strausr

package-lock.json

@@ -16,6 +16,8 @@ dist-ssr
 .env
 .env.local
 .env.production
+# Server-only env (for secure signed uploads); do not commit API secret
+server/.env
 
 # Editor directories and files
 .vscode/*