security: ignore config.toml to prevent token leaks

.gitignore

@@ -1,2 +1,8 @@
 /target
 IMPLEMENTATION_PLAN.md
+
+# Config files that may contain GitHub tokens
+# Note: User config files are stored in platform-specific directories outside the repo
+# (e.g., ~/.config/gh-celebs/config.toml on Linux)
+# This prevents accidental commits if someone creates config.toml in the project root
+/config.toml