chore: repo cleanup and security hardening

- Remove stale root files: chain_spec.json, pezkuwi.gbp, publish.log,
  test-asset-hub.toml (moved to .claude/)
- Move publish_batch.sh and publish_crates.sh to scripts/
- Remove hardcoded /home/mamostehp/res/ paths from scripts and comments
  (WALLETS_FILE env var now required, no silent fallback)
- Update .gitignore: add protection entries for regenerable artifacts
  and .claude/ experience files

.gitignore

@@ -73,6 +73,16 @@ head.rs
 .claude/SESSION_LOG.md
 .claude/hooks/
 .claude/settings.json
+.claude/CRITICAL_STATE.md
+.claude/simulation-lessons.md
+.claude/benchmark_checklist.md
+.claude/mainnet_fresh/
+.claude/test-asset-hub.toml
+
+# Regenerable artifacts (do not commit)
+chain_spec.json
+publish.log
+pezkuwi.gbp
 
 # Zombienet binaries
 zombienet-linux