What does `.dockerignore` do, and why does it matter for build performance?

It excludes specified files/directories from being sent to the Docker build context, which both speeds up the build (less data transferred to the daemon) and prevents accidentally copying sensitive files (like `.env` or `.git`) into an image via a broad COPY instruction.