vault-cli: -m/--provider flags on analyze, git-commit on sync-data, gitignore pyc

- vault analyze now accepts -m MODEL and --provider PROVIDER, passed through to
  hermes -z, so intelligence/spend can be dialed inline per cadence (nightly cheap
  on Haiku/bedrock, ad-hoc on the default smart model).
- sync-data --execute now git-commits like the other write ops (was the only
  mutating op that skipped the commit).
- gitignore + untrack __pycache__/*.pyc build artifacts.

vault_ops.py

@@ -198,6 +198,7 @@ def op_sync_data(argv, execute):
     if len(made) > 40:
         print(f"  ... and {len(made)-40} more")
     if execute:
+        _git_commit(f"vault sync-data ({len(made)} /data dir(s))", execute)
         print("EXECUTED.")
     else:
         print("DRY-RUN — nothing changed. Add --execute.")