Integrate CAN-aware CMS risk pipeline and relocatable Orin runtime

.gitignore

@@ -1,4 +1,41 @@
-/build/
-/engines/
-/logs/
-*.tmp
+# Python caches and local environments
+__pycache__/
+*.py[cod]
+.venv/
+venv/
+
+# Build outputs (keep the supplied vendor libraries in lib/)
+build/
+/build-*/
+*.o
+*.a
+/vision-anti-pinch
+
+# Models and test media
+models/
+*.engine
+*.onnx
+*.pt
+*.mp4
+*.avi
+
+# Runtime outputs
+logs/
+outputs/
+out/
+frames/
+*.log
+*.pid
+
+# Local credentials and legacy SSH authentication helper
+.env
+.env.*
+!.env.example
+ssh_expect.exp
+
+# The checked-in Orin deployment bundle intentionally includes its runtime assets.
+!/orin/build/
+!/orin/build/libvision_native.so
+!/orin/models/
+!/orin/models/engines/
+!/orin/models/engines/*.engine