target/
# Note: do NOT exclude Cargo.lock here. It is committed (this is a binary crate)
# and the Dockerfile must COPY it for reproducible dependency resolution.