fix: prevent .env from being baked into mqtt_demo image; fix dangling requirements-bootstrap.txt path

.dockerignore

@@ -0,0 +1,15 @@
+# Build context is the repo root (see mqtt_demo/docker-compose.yml's
+# `context: ..`). The Dockerfile COPYs whole directories (protocol/,
+# ocf/, mqtt_demo/), so anything under them that shouldn't land in the
+# image has to be excluded here explicitly.
+
+# Secrets — never bake these into the image. Mounted at runtime via
+# the /config volume instead.
+**/.env
+certs/
+
+# Local dev cruft.
+**/__pycache__/
+**/*.pyc
+.git/
+.venv/

requirements-bootstrap.txt

@@ -1,4 +1,4 @@
 # Setup-only deps for setup_cert.py: shells out to `openssl` for SHA-1
 # signing (independent of python-cryptography's policy) and uses
 # pyOpenSSL for the optional --test DTLS handshake.
--r requirements.txt
+-r mqtt_demo/requirements.txt