Store logs in logs/ folder with 60 day retention

- Logs go to logs/YYYYMMDD.log per script per day
- Cleanup cron runs at 09:00 daily, deletes logs older than 60 days
- logs/ gitignored

.gitignore

@@ -1,2 +1,2 @@
 config.sh
-*.log
+logs/

setup.sh

@@ -32,9 +32,13 @@ fi
 chmod +x "$SCRIPT_DIR/npm-security-check.sh"
 chmod +x "$SCRIPT_DIR/check-nextjs-rce.sh"
 
+# ── Create logs directory ──────────────────────────────────────────────────────
+mkdir -p "$SCRIPT_DIR/logs"
+
 # ── Cron jobs ──────────────────────────────────────────────────────────────────
-CRON_1="0 8 * * * $SCRIPT_DIR/npm-security-check.sh >> $SCRIPT_DIR/npm-security-check-cron.log 2>&1"
+CRON_1="0 8 * * * $SCRIPT_DIR/npm-security-check.sh >> $SCRIPT_DIR/logs/npm-security-check-\$(date +\%Y\%m\%d).log 2>&1"
-CRON_2="5 8 * * * $SCRIPT_DIR/check-nextjs-rce.sh >> $SCRIPT_DIR/check-nextjs-rce-cron.log 2>&1"
+CRON_2="5 8 * * * $SCRIPT_DIR/check-nextjs-rce.sh >> $SCRIPT_DIR/logs/check-nextjs-rce-\$(date +\%Y\%m\%d).log 2>&1"
+CRON_3="0 9 * * * find $SCRIPT_DIR/logs -name '*.log' -mtime +60 -delete"
 
 EXISTING=$(crontab -l 2>/dev/null || true)
 
@@ -52,6 +56,13 @@ else
     echo "Cron job registered: check-nextjs-rce.sh daily at 08:05."
 fi
 
+if echo "$EXISTING" | grep -qF "logs -name '*.log'"; then
+    echo "Log cleanup cron already registered — skipping."
+else
+    (crontab -l 2>/dev/null; echo "$CRON_3") | crontab -
+    echo "Cron job registered: log cleanup daily at 09:00 (60 day retention)."
+fi
+
 # ── Test Telegram ──────────────────────────────────────────────────────────────
 source "$SCRIPT_DIR/config.sh"
 HOSTNAME=$(hostname)