docs: enrich OOM-fix streaming-refactor plan + gitignore fix (#144) #164

Job	Run time
jscpd (duplication < 3% on touched code)	18s
SBOM (SPDX + CycloneDX)	19s
Trivy (filesystem + container scan)	10s
Semgrep (SAST)	26s
Gitleaks (secret scan)	10s
OSV-Scanner (SCA)	4s
	1m 27s

Provide feedback