chore: add .gitignore (uploads, *.db, certs)

When OCR finds 5+ digits (match_5plus) but no 5-6 pattern, the frontend
now extracts the first 5 digits as the candidate machine ID, shows it,
and calls lookupAsset() to check the canteen DB — same behavior as the
5dash6 path. Eliminates the confusing '(no 5-6 pattern)' message.

.gitignore

@@ -1,5 +1,5 @@
 uploads/
-__pycache__/
-*.py[cod]
 *.db
-.env
+cert.pem
+key.pem
+__pycache__/

static/index.html

@@ -818,7 +818,9 @@ async function uploadSelected() {
       html += '<div style="margin-top:4px;color:var(--green);">✅ Matched: <strong>' + esc(ocr.match_5dash6) + '</strong> → machine ID: ' + mid + '</div>';
       lookupAsset(mid);
     } else if (ocr.match_5plus) {
-      html += '<div style="margin-top:4px;color:var(--amber);">⚠️ Digits: <strong>' + esc(ocr.match_5plus) + '</strong> (no 5-6 pattern)</div>';
+      const mid = ocr.match_5plus.replace(/[^0-9]/g,'').slice(0, 5);
+      html += '<div style="margin-top:4px;color:var(--amber);">🔍 Digits: <strong>' + esc(ocr.match_5plus) + '</strong> → trying ID <strong>' + mid + '</strong></div>';
+      lookupAsset(mid);
     } else {
       html += '<div style="margin-top:4px;color:var(--text3);">No machine ID found in image</div>';
     }