Fix the repos/ ignore pattern so the vendored dep stays tracked

git cannot re-include a path whose parent directory is excluded, so
"repos/" plus "!repos/PublicTransportHackathon/" silently did nothing —
the vendored dependency only got committed because it was already staged,
and the next `git add` would have dropped it again and re-broken CI.
Excluding the contents (repos/*) instead makes the negation work.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: NoamGaash

.gitignore

@@ -33,7 +33,7 @@ Thumbs.db
 
 # Teammates' repos cloned for reference (./dev clone-repos) — read-only copies
 # with their own history upstream, not ours to carry.
-repos/
+repos/*
 # ...except PublicTransportHackathon, which is a real build dependency
 # (pyproject's publictransporthackathon points at it). It's a PRIVATE repo, so
 # a git+https dependency can't be fetched by CI or by anyone who clones this