Open source CLAWSPACE monorepo

[NimaChu]

Summary

• publish a clean monorepo snapshot containing the Astro website, clawapp-creator skill, and curated examples
• keep the CLAWSPACE Mini Program source and private client configuration outside the public repository
• exclude runtime data, user applications, credentials, generated archives, and private deployment configuration
• add architecture, contribution, security, licensing, and open-source boundary documentation
• harden admin bootstrap, app ownership, package extraction, Blob URL validation, cover validation, hosted-app isolation, and starter rendering
• update the website to Astro 7 / Node 24 and generate the downloadable skill package from monorepo source

Verification

• fresh local clone: website and bundled example dependencies installed from lockfiles
• ./scripts/verify-public-snapshot.sh
• git diff --check
• both npm dependency trees report 0 vulnerabilities
• full npm run build in platform/web
• clean-clone smoke: /api/health 200, / 200, /downloads/clawapp-creator.zip 200
• production hosted-app isolation returns 503 when HOSTED_APPS_ORIGIN is absent
• Codex Security repository scan: 296/296 files reviewed, no remaining reportable findings