Initial scaffold: Shopify recesso (withdrawal) compliance app

- Remix (TypeScript) + Polaris, official Shopify app template
- Prisma multi-tenant schema (Settings, ExclusionRule, WithdrawalRequest, AuditLog, WebhookEvent) on Postgres
- Mandatory GDPR compliance webhooks (data_request, redact, shop/redact) + HMAC handlers
- API version pinned 2026-04, scopes read_orders/read_products
- Fly deploy config; two-env strategy (custom now, public later)
- Dev setup: shopify.web.toml + Vite allowedHosts for tunnels
- Docs: PLAN.md, ANALISI-REQUISITI-LEGALI.md (Art. 54-bis compliance)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Mv83a29B4eFv5ixoj6PoE1

.gitignore

@@ -0,0 +1,29 @@
+# Monorepo root: docs (PLAN.md, ANALISI-REQUISITI-LEGALI.md, README.md) + the
+# Shopify app under app/. Deep rules also live in app/.gitignore.
+
+# Dependencies
+node_modules
+app/node_modules
+
+# Build output
+app/build
+app/public/build
+
+# Env / secrets — NEVER commit
+.env
+.env.*
+app/.env
+app/.env.*
+!app/.env.example
+
+# Shopify CLI local state
+app/.shopify
+.shopify
+
+# Local SQLite (legacy dev DB from the template)
+app/*.sqlite
+app/prisma/*.sqlite*
+**/dev.sqlite*
+
+# OS / editor cruft
+.DS_Store