Repository housekeeping: expand .dockerignore/.gitignore, add .gitattributes, refine GitHub Actions workflow, and optimize Dockerfile (env vars, layer ordering, non-root user)

Created workflow