docs: track superpowers working documents in git

The uups-bank-demo wave's SDD records (ledger, six task briefs and reports,
review diffs) and the brainstorm design mockups were git-ignored, so they
existed only on one sandbox VM and reached no remote — this repo had no remote
at all until now.

Removes `.superpowers/` from .gitignore and the `*` .gitignore the superpowers
plugin writes inside .superpowers/sdd/; the second blocks the directory even
with the first removed.

Excluded as ephemeral local-server state, and now ignored by name:
.last-port, .last-token (a 64-char session token for a brainstorm server on a
port that is long gone), and the per-session state/ directories.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Fnwzj6McD6kSkXwjUKFKxe

.superpowers/sdd/2026-08-17-uups-bank-demo/review-eece34c..a6f9533.diff

@@ -0,0 +1,31 @@
+# Review package: eece34c088d52f1650baef34b51a8fa26ec12a00..a6f9533aacd4d6cdbbf9682bfd8482ced065ebf5
+
+## Commits
+a6f9533 build: approve pinned install scripts
+
+## Files changed
+ package.json | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+## Diff
+diff --git a/package.json b/package.json
+index 1612ecb..dd15769 100644
+--- a/package.json
++++ b/package.json
+@@ -3,12 +3,16 @@
+   "private": true,
+   "version": "0.1.0",
+   "type": "module",
+   "packageManager": "npm@11.17.0",
+   "engines": {
+     "node": ">=24.18.0 <25",
+     "npm": ">=11.17.0 <12"
+   },
+   "devDependencies": {
+     "@openzeppelin/upgrades-core": "1.46.0"
++  },
++  "allowScripts": {
++    "keccak@3.0.4": true,
++    "secp256k1@4.0.5": true
+   }
+ }