F-catalog-B: no ignore pattern hides a module's source; nfs-server's and restic's patterns anchored

A bare pattern meant for a binary (mesh-build-node) matched the command directory of the same name, so git
ignored every new file there and publish.go was never committed (catalogue review F1). The kind: every
bare pattern of a module's .gitignore is anchored to the binary (nfs-server's hid all of cmd/nfs-server),
and checks/gitignored refuses an ignore pattern, the module's or the catalogue's, that hides a directory
under a module's cmd/ or internal/, a Go file added there, or a source file there, in a git checkout and a
plain folder alike.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

modules/nfs-server/.gitignore

@@ -1 +1,3 @@
-nfs-server
+# the binary, built at the module or in its command directory; never the command directory itself
+/nfs-server
+/cmd/nfs-server/nfs-server

modules/restic/cmd/restic-backups/.gitignore

@@ -1 +1,2 @@
-restic-backups
+# the binary, built in this command directory
+/restic-backups