Test copied .dockerignore patterns against candidate build-context paths and generate a normalized rule set to exclude files like .git, node_modules, and secrets.