Build Wisp: on-device transcription studio (web + native, one codebase)

Private, offline speech-to-text that runs Whisper on the user's own device —
free, no account, no per-minute fees. Replaces Otter.ai / Rev.

- Pure, tested engine: chunking, overlap timestamp-stitching, exports
  (SRT/VTT/TXT/MD/JSON), WAV codec, resampler, job queue, model catalog (142 tests).
- Platform-abstracted TranscriptionEngine: transformers.js on web (loaded from
  CDN at runtime to dodge Metro's onnxruntime-web bundling limits), whisper.rn
  on native. Shared pipeline orchestrates decode -> chunk -> transcribe -> stitch.
- Cross-platform StorageRepo (Dexie web / expo-sqlite native), Zod-validated.
- UI: library + search, import, live-progress transcription, synced click-to-seek
  editor, multi-format export; model picker + privacy in settings.
- Web ships as a single-page PWA with COOP/COEP isolation for threaded WASM;
  Docker (nginx) image + Traefik compose for wisp.briggen.dev.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.dockerignore

@@ -0,0 +1,46 @@
+# .dockerignore
+# ---------------------------------------------------------------------------
+# Keeps the Docker build context small and the builds reproducible. Without this,
+# `COPY . .` in docker/web.Dockerfile would copy the host's node_modules, build
+# outputs, and native folders into the image — slow, large, and non-deterministic
+# (the builder runs its OWN `bun install` / prebuild). It also avoids leaking any
+# local secrets/keystores into the build context.
+# ---------------------------------------------------------------------------
+
+# Dependencies — the builder installs these itself from the lockfile.
+node_modules
+
+# Build outputs — regenerated inside the image.
+dist
+web-build
+.expo
+.metro-health-check*
+
+# Generated native projects — `expo prebuild` regenerates android/ in the
+# android build; nothing in the web image needs them.
+android
+ios
+
+# VCS / CI / editor metadata.
+.git
+.gitea
+.github
+.vscode
+
+# Local env + anything secret-ish (keystores, certs). Never bake into images.
+.env*
+*.keystore
+*.jks
+*.p12
+*.p8
+*.key
+*.pem
+*.mobileprovision
+
+# Docs / OS cruft.
+*.md
+docs
+.DS_Store
+
+# TypeScript build info.
+*.tsbuildinfo