Gitignore local-only stray files

The survey docx and npm package-lock.json are local artifacts that
shouldn't be tracked (the repo uses pnpm). Ignoring so 'git add -A'
can't accidentally commit them.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: evangauer

.gitignore

@@ -47,3 +47,5 @@ WEBSITE-BUILD-PROMPT.md
 .vercel
 docs/screenshots/audit/
 test-results/
+CAVSG_AI_Innovator_Survey_COMPLETED.docx
+package-lock.json