fix: update manifest with new files, remove sensitive files from remote

publish/manifest

@@ -4,6 +4,7 @@
 
 .gitignore
 .python-version
+CHANGELOG.md
 CHEATSHEET.md
 CLAUDE.md
 README.md
@@ -33,9 +34,16 @@ bincio/extract/sport.py
 bincio/extract/strava_csv.py
 bincio/extract/timeseries.py
 bincio/extract/writer.py
+bincio/import_/__init__.py
+bincio/import_/cli.py
+bincio/import_/strava.py
 bincio/render/__init__.py
 bincio/render/cli.py
 bincio/render/merge.py
+publish.sh
+publish/CLAUDE.md
+publish/extract_config.example.yaml
+publish/manifest
 site/.env.example
 site/astro.config.mjs
 site/package.json
@@ -45,12 +53,17 @@ site/src/components/ActivityCharts.svelte
 site/src/components/ActivityDetail.svelte
 site/src/components/ActivityFeed.svelte
 site/src/components/ActivityMap.svelte
+site/src/components/AthleteDrawer.svelte
+site/src/components/AthleteView.svelte
 site/src/components/EditDrawer.svelte
+site/src/components/MmpChart.svelte
+site/src/components/RecordsView.svelte
 site/src/components/StatsView.svelte
 site/src/layouts/Base.astro
 site/src/lib/format.ts
 site/src/lib/types.ts
 site/src/pages/activity/[id].astro
+site/src/pages/athlete/index.astro
 site/src/pages/index.astro
 site/src/pages/stats/index.astro
 tests/__init__.py