Explain the benign PCI/SELinux log entries and ignore local log files in git.
Prevent state directories, sockets, and scratch rootfs files from being tracked.
Store the microVM binary, kernel, rootfs, and SSH key so the local launcher can boot without external downloads.
