config: 3 homeservers, gifApiKey moved to server secrets

Giphy API key removed from config.json (was tracked in git — now purged
from all history via git-filter-repo). Key lives in /etc/lotus-deploy.env
on LXC 106; lotus_deploy.sh injects it into config.json after each rsync.

config.json now has:
- homeserverList: lotusguild.org + matrix.org + mozilla.org
- allowCustomHomeservers: true
- gifApiKey: "" (placeholder — injected at deploy time)

.gitignore: removed the incorrect config.json entry (tracked files are
unaffected by .gitignore; the entry was misleading).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitignore

@@ -5,8 +5,3 @@ devAssets
 
 .DS_Store
 .ideapackage-lock.json
-
-# Runtime config — managed directly on each deploy host, never committed.
-# Contains the GIF API key and homeserver list. git reset --hard won't touch
-# it but git clean would delete it without this entry.
-config.json

config.json

@@ -1,7 +1,7 @@
 {
   "defaultHomeserver": 0,
-  "homeserverList": ["matrix.lotusguild.org"],
-  "allowCustomHomeservers": false,
+  "homeserverList": ["matrix.lotusguild.org", "matrix.org", "mozilla.org"],
+  "allowCustomHomeservers": true,
   "featuredCommunities": {
     "openAsDefault": false,
     "spaces": [],