Prevent state directories, sockets, and scratch rootfs files from being tracked.
Store the microVM binary, kernel, rootfs, and SSH key so the local launcher can boot without external downloads.
