rig major updates

rig/.gitignore

@@ -16,6 +16,14 @@ arch/*.dot
 # binaries pulled by `make deps-bundle` for the air-gapped installer image
 vendor
 
-# Client rigs are NOT ignored here. A copy is a SIBLING of this directory
-# (../acme-rig), so a rule in this file cannot see it — the rules live in the
-# parent repo's .gitignore, anchored at its root, where `*-rig/` matches them.
+# Overlays that live with no version control of their own, or clones of their own
+# repos: rig reads them and never tracks them (docs/notes/overlay.md).
+/local/
+
+# A profile you activated (cp env.d/<name>.env.example env.d/<name>.env) is this
+# machine's choice; only the examples are committed.
+ctrl/env.d/*.env
+
+# Only the default kit is committed; a kit for a local profile is this machine's.
+standalone/*
+!standalone/default/