Gitignore raw statements/secrets; add seed merchant_map

.gitignore

@@ -1,5 +1,14 @@
 # Secrets — never commit the Firefly token
 .firefly.json
 
+# Raw bank/credit-card statements — sensitive (account numbers, full history),
+# re-exportable from the banks anytime. Keep local only.
+EXPORTS/
+*.qfx
+*.QFX
+*.ofx
+*.OFX
+*.csv
+
 # macOS cruft
 .DS_Store

merchant_map.json

@@ -0,0 +1,11 @@
+{
+  "rules": [
+    {
+      "match": "SHEETZ",
+      "account_name": "Sheetz",
+      "category": "Fuel",
+      "type": "withdrawal",
+      "account_id": 566
+    }
+  ]
+}