Harden CI, release, and acceptance test safety

.gitignore

@@ -1,12 +1,12 @@
-# If you prefer the allow list template instead of the deny list, see community template:
-# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
-#
 # Binaries for programs and plugins
 *.exe
 *.exe~
 *.dll
 *.so
 *.dylib
+terraform-provider-dynu
+terraform-provider-dynu_v*
+dist/
 
 # Test binary, built with `go test -c`
 *.test
@@ -17,9 +17,6 @@ coverage.*
 *.coverprofile
 profile.cov
 
-# Dependency directories (remove the comment below to include it)
-# vendor/
-
 # Go workspace file
 go.work
 go.work.sum
@@ -27,10 +24,22 @@ go.work.sum
 # env file
 .env
 
+# Terraform local artifacts
+.terraform/
+**/.terraform/
+*.tfvars
+!*.tfvars.example
+terraform.tfvars
+*.tfstate
+*.tfstate.*
+.terraform.lock.hcl
+
+# Codex/dev artifacts
+.codex/bin/
+.codex/tmp/
+.codex/cache/
+.codex/logs/
+
 # Editor/IDE
 # .idea/
 # .vscode/
-
-*.tfvars
-!*.tfvars.example
-*.tfstate