A Go test binary or coverage file left at the repository root, which
.gitignore already ignores, went into the build context of every docker
build in script/ and was copied into the lint, test and build stages.
The repository's own section of .dockerignore now lists /*.test and
/*.out, root-anchored like its other entries.
Checked with a probe image that copies the whole context: x.test and
x.out planted at the root are no longer in it, and nothing else changed.
Model: opus-5-5