security: gitignore runtime secrets, add config and token templates

.gitignore

@@ -32,3 +32,7 @@ report.[0-9]_.[0-9]_.[0-9]_.[0-9]_.json
 
 # Finder (MacOS) folder config
 .DS_Store
+
+# Runtime secrets – never commit real values
+tokens.json
+config.json

config.example.json

@@ -0,0 +1,28 @@
+{
+  "alwaysOn": false,
+  "refreshRate": 10000,
+  "layout": {
+    "header-left": "clock",
+    "header-right": "weather",
+    "main-1": "sl",
+    "main-2": "sbb",
+    "footer-1": "spotify",
+    "footer-2": "spacer",
+    "footer-3": "system"
+  },
+  "spotify": {
+    "clientId": "",
+    "clientSecret": ""
+  },
+  "weather": {
+    "plz": ""
+  },
+  "sl": {
+    "stationId": "",
+    "stationName": ""
+  },
+  "sbb": {
+    "stationId": "",
+    "stationName": ""
+  }
+}

config.json

@@ -1,5 +0,0 @@
-{
-  "stationId": "9182",
-  "stationName": "Hökarängen",
-  "refreshRate": 30000
-}

tokens.example.json

@@ -0,0 +1,7 @@
+{
+  "spotify": {
+    "accessToken": "",
+    "refreshToken": "",
+    "expiresAt": 0
+  }
+}