Harden .gitignore for runtime data

.gitignore

@@ -21,30 +21,13 @@ config.py
 # PyCharm
 .idea/
 
-# Aria data (private user data — never commit)
-data/memory.db
-data/memory.db-shm
-data/memory.db-wal
-data/calendar.db
-data/usage_log.json
-data/voice_samples/
-data/voice_profile.json
-data/web_cache.json
-data/*token*.txt
-data/*token*.json
-data/captures/
-
-# Proactive analyst notification queue — runtime state
-data/notifications.jsonl
-
-# Meeting transcripts — private, may contain work discussion
-data/meetings/
-
-# Personal study explanations — may contain snippets of work code, never commit
-data/explanations/
-
-# Validation/session review reports — regenerated locally
-data/session_reviews/
+# ── Runtime data — never commit ───────────────────────────────────────────────
+# Everything Aria writes at runtime lives under data/ and must not be tracked:
+# memory.db, calendar.db, personality.json, captures/, meetings/, explanations/,
+# notifications.jsonl, session_reviews/, vts_token.json, web_cache.json, etc.
+# The single blanket rule below covers all current and future runtime files.
+data/*
+!data/.gitkeep
 
 # Large model files (re-download, don't commit)
 assets/models/*.onnx