Keep the Applications list's table inside its card (closes #262)

Table cells never wrap, so a long repository URL made the table wider
than its card, which hides what does not fit and so cut off the Actions
column and the Deploy buttons. The repository URL now wraps within its
column, and the card scrolls sideways when the table still does not
fit. A handler test checks both. Every class used was already in the
committed static/css/tailwind.css.

Model: opus-5-5

.dockerignore

@@ -1,6 +1,9 @@
 # .git is sent so that `make build` in the Dockerfile can stamp the commit into
 # upaas. List no tracked file here: git would see it as deleted in the build and
 # the version would end in -dirty.
+# .git is sent without its config, because a remote URL there can carry a
+# credential; `git describe` does not need it.
+.git/config
 .env
 bin/
 .vscode/

TODO.md

@@ -25,6 +25,10 @@ regress.
   Actions column and the Deploy buttons. In a window too narrow for the table,
   the card scrolls sideways instead of cutting the table off (#262).
 
+- 2026-10-02: `.dockerignore` leaves out `.git/config`, so a remote URL there
+  that carries a credential no longer goes into the Docker build; the image
+  still shows the commit it was built from (#269).
+
 - 2026-10-02: The build no longer passes the CPU architecture in: upaas reads it
   from Go's `runtime.GOARCH` when it runs, and the startup log line reports it
   as `arch`. `CONVENTIONS.md` follows the updated conventions in `sneak/prompts`