gitignore data/ — it holds face embeddings keyed by real names

data/ is the DATA_DIR the README tells you to mount, and it was not ignored: it holds 1,593
face-embedding .npy files plus upload trackers keyed by person name. A single 'git add -A'
would have published them. Never committed to date, so history is clean.

.github/workflows/docker-publish.yml

@@ -183,7 +183,7 @@ jobs:
           ref: ${{ inputs.tag || github.ref }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

.gitignore

@@ -34,3 +34,7 @@ wheels/
 .pytest_cache/
 .mypy_cache/
 .python-version
+
+# Runtime data: face embeddings + upload trackers keyed by real person names.
+# Never commit — this is the DATA_DIR the README tells you to mount.
+data/