Never write gitignored subagent files as baseline blobs

CaptureSubagentBaselines blobbed whatever file a subagent touched, including a gitignored one such as .env, putting its plaintext into the object store. Shadow snapshots filter ignored files for this reason, and an ignored file is never snapshotted or attributed, so baselines now skip them the same way (failing closed when the check itself fails).