chore: add .gitignore, CrowdSec acquis config, update architecture docs

- .gitignore: exclude crowdsec/.crowdsec.env (bouncer API key), .env.local,
  and compiled Go binaries (backend/bin/, backend/healthcheck)
- crowdsec/acquis.yaml: log acquisition config for CrowdSec agent
- docs: update d2 and mermaid diagrams to reflect MinIO bucket renames
  (libnovel-chapters→chapters, libnovel-audio→audio, libnovel-browse→catalogue),
  remove /api/browse, update presigned URL paths

v3/.gitignore

@@ -0,0 +1,5 @@
+# CrowdSec — generated bouncer API key; never commit
+crowdsec/.crowdsec.env
+
+# Local env overrides
+.env.local

v3/crowdsec/acquis.yaml

@@ -0,0 +1,12 @@
+# CrowdSec log acquisition — tells the CrowdSec agent which logs to parse.
+#
+# Caddy writes JSON access logs to /var/log/caddy/access.log (mounted from the
+# caddy_logs Docker volume).  CrowdSec reads the same volume at the same path.
+#
+# The `crowdsecurity/caddy` collection (installed via COLLECTIONS env var)
+# provides the parser that understands Caddy's JSON log format.
+
+filenames:
+  - /var/log/caddy/access.log
+labels:
+  type: caddy

v3/docs/d2/api-routing.d2

@@ -171,7 +171,7 @@ client -> caddy: HTTPS :443
 
 caddy -> sk: "/* (catch-all)\n→ SvelteKit handles auth"
 caddy -> be: "/health  /scrape*\n/api/browse  /api/book-preview/*\n/api/chapter-text/*  /api/chapter-markdown/*\n/api/reindex/*  /api/cover/*\n/api/audio-proxy/*  /api/catalogue  /api/ranking"
-caddy -> storage.mn: "/avatars/*\n(presigned GETs)"
+caddy -> storage.mn: "/avatars/*\n/audio/*\n/chapters/*\n(presigned MinIO GETs)"
 
 # ─── SvelteKit → Backend (server-side proxy) ──────────────────────────────────
 

v3/docs/d2/architecture.d2

@@ -46,7 +46,7 @@ storage: Storage {
 
   minio: MinIO {
     shape: cylinder
-    label: "MinIO :9000\n\nbuckets:\n  libnovel-chapters\n  libnovel-audio\n  avatars\n  libnovel-browse"
+    label: "MinIO :9000\n\nbuckets:\n  chapters\n  audio\n  avatars\n  catalogue"
   }
 
   pocketbase: PocketBase {
@@ -135,7 +135,7 @@ app.ui -> app.backend: REST API calls (server-side)\n/api/catalogue /api/book-pr
 
 app.caddy -> app.ui: "/* (catch-all)\n/api/scrape/*\n/api/chapter-text-preview/*\n→ SvelteKit (auth enforced)"
 app.caddy -> app.backend: "/health  /scrape*\n/api/browse  /api/book-preview/*\n/api/chapter-text/*\n/api/reindex/*  /api/cover/*\n/api/audio-proxy/*"
-app.caddy -> storage.minio: "/avatars/*\n(presigned avatar GETs)"
+app.caddy -> storage.minio: "/avatars/*\n/audio/*\n/chapters/*\n(presigned MinIO GETs)"
 
 # ─── External → App ───────────────────────────────────────────────────────────
 

v3/docs/mermaid/data-flow.mermaid.md

@@ -22,7 +22,7 @@ flowchart TD
     H --> I[Worker pool — N goroutines\nRUNNER_MAX_CONCURRENT_SCRAPE]
     I --> J[For each missing chapter:\nGET chapter HTML from novelfire.net]
     J --> K[Parse HTML → Markdown\nhtmlutil.NodeToMarkdown]
-    K --> L[PUT object to MinIO\nlibnovel-chapters/{slug}/{n}.md]
+    K --> L[PUT object to MinIO\nchapters/{slug}/{n}.md]
     L --> M[Upsert book doc\nto Meilisearch index: books]
     M --> Z
     F --> M
@@ -87,7 +87,7 @@ flowchart TD
     H --> I["GET /api/chapter-text/{slug}/{n}\nfrom backend — plain text"]
     I --> J[POST /v1/audio/speech\nto Kokoro-FastAPI\nbody: text + voice]
     J --> K[Stream MP3 response]
-    K --> L[PUT object to MinIO\nlibnovel-audio/{slug}/{n}/{voice}.mp3]
+    K --> L[PUT object to MinIO\naudio/{slug}/{n}/{voice}.mp3]
     L --> M[UPDATE audio_task\nstatus=done]
 
     N(["Client polls\nGET /api/audio/status/{slug}/{n}"]) --> O{status?}