feat: add semantic releases and contributor tracking

[HashemKhalifa]

Details

What this PR does

• Adds semantic-release with Conventional Commits based SemVer calculation.
• Records the release version and grouped changelog in the release PR.
• Verifies those merged release assets before creating Git tags and GitHub Releases.
• Makes pnpm 11.11.0 the sole Node package manager for local and CI release tooling.
• Adds CI gates for Python validators and the 52-test bundled pstack suite.
• Adds explicit contributor and upstream provenance tracking.
• Documents and enforces a PR-only release workflow with no direct commits to main.

How it works

• semantic-release analyzes commits on main and selects major, minor, or patch releases.
• The release PR carries the matching plugin manifest version and changelog entry.
• The exec plugin fails closed if either release asset does not match semantic-release's calculated tag.
• The GitHub plugin creates the verified tag and GitHub Release; it never writes a release commit to main.
• CI runs before publication, and the retained live-agent receipt remains part of the port validation gate.

Validation

• 13 Python tests passed, including a regression for linked semantic-release changelog headings.
• Port validator passed for 45 skills and 5 agents.
• Workflow YAML parsed successfully.
• pnpm frozen-lockfile installation passed its supply-chain policy checks.
• semantic-release dry run completed successfully and selected v1.0.0.
• Generated release notes include Features and Bug Fixes sections.
• Bundled pstack suite passed 52/52 tests and 206 assertions in the isolated CI Git environment.
• All five custom agents passed live Codex 0.151.0 spawn checks.

Contributors

• Lauren Tan (@poteto)
• Cursor Agent (@cursoragent)
• Hashem Khalifa (@HashemKhalifa)

Release behavior

After this PR is accepted and merged, the Release workflow revalidates main, confirms the PR-recorded v1.0.0 assets, creates tag v1.0.0, and publishes the GitHub Release without bypassing branch protection.

[HashemKhalifa]

@codex review

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-31T12:23:19.519484Z	1b30640	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1b306400dc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[github-actions]

🎉 This PR is included in version 1.0.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀