The lockfile catches up with the mcp dev dependency, and adoption output is ignored

uv.lock records the `mcp` dev dependency added with `grapharc mcp`, so its
gate tests run in CI rather than silently skipping. The `.mcp.json` and
skill that `grapharc init --claude-code` writes when this repo dogfoods its
own supervision join the generated-not-authored list, alongside the runtime
residue ignored above.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: Shashankss1205

.gitignore

@@ -232,8 +232,9 @@ __marimo__/
 # A policy generated because no `--policy`, no `grapharc.toml` and no existing
 # one was found. Generated rather than authored: the design is that you *promote*
 # it — read it, edit it, move it, pass `--policy` — instead of committing it from
-# where a tool dropped it. `grapharc.toml` itself is deliberately NOT ignored;
-# that one is yours and belongs in version control.
+# where a tool dropped it. In a project of your own, the scaffolded
+# `grapharc.toml` is authored config and belongs in version control; in *this*
+# repo the root one is dogfooding residue, ignored with the rest of it below.
 .grapharc/
 
 # Durable claim stores from `grapharc demo --memory PATH`, and the two sidecars
@@ -247,7 +248,26 @@ __marimo__/
 /workspace/
 /scratch/
 
+# Dogfooding residue at the repo root: the `grapharc init` scaffold pair, the
+# registries that drive the demo films, and the `app/` directory a bench
+# shakeout wrote its success condition into. None of it is project source, and
+# none of it — the bench residue especially — should ride along on a push.
+# Root-anchored, so `bench/fixture/app/` (a committed part of the bench) is
+# untouched.
+/registry.py
+/grapharc.toml
+/demo_registry.py
+/sample_incident.py
+/app/
+
 # Claude Code's per-machine settings. Already covered by many people's global
 # ignore; named here so a fresh clone does not depend on that being true.
 .claude/settings.local.json
 HANDOFF.md
+
+# Generated by `grapharc init --claude-code` when this repo dogfoods its own
+# supervision. Generated rather than authored, like the policy above: promote
+# a copy into a project you are governing instead of committing the one a
+# smoke test dropped here.
+/.mcp.json
+/.claude/skills/