fix(seed): gate github-dev on account-age (>=12mo), not oauth-account handle

Aligns the launch seed with the live prod policy. The github-devs sub-forum now
proves an aged GitHub account (>= 12 months) without disclosing the renameable
public handle; oauth-account leaked the username. A re-seed previously reverted
the live gate back to oauth-account.

Author: AtHeartEngineer

scripts/seed-launch-subforums.ts

@@ -108,8 +108,14 @@ const slugWith = (base: string): string => `${PREFIX}${base}`;
 const emailDomainPolicy = (domain: string): PolicyNode => ({
 	badge: { type: 'email-domain', where: { domain } }
 });
-const githubOauthPolicy = (): PolicyNode => ({
-	badge: { type: 'oauth-account', where: { provider: 'github' } }
+// Gate on account age, not the oauth-account handle: proving a GitHub account is
+// at least a year old (the plugin only issues account-age at 12+ months) is a real
+// anti-throwaway signal without disclosing the renameable public username. The leaf
+// matches on presence (`where` is exact-equality per key, and Minister issues only
+// the single highest age bucket a user clears), so a bare provider constraint means
+// ">= 12 months".
+const githubAgePolicy = (): PolicyNode => ({
+	badge: { type: 'account-age', where: { provider: 'github' } }
 });
 
 const LAUNCH: LaunchSubforum[] = [
@@ -127,18 +133,18 @@ const LAUNCH: LaunchSubforum[] = [
 		presets: ['public-member-posts', 'members-only']
 	},
 	{
-		// (2) GitHub-verified DEV - oauth-account provider=github; members post +
-		// comment + poll, public reads.
+		// (2) GitHub-verified DEV - account-age provider=github (>= 12 months, no
+		// handle disclosed); members post + comment + poll, public reads.
 		slug: slugWith('github-devs'),
 		name: 'GitHub-Verified Devs',
 		description:
-			'Developers who proved a linked GitHub account. Members post, comment, and run polls; the public can read.',
+			'Developers who proved a GitHub account at least a year old (no username disclosed). Members post, comment, and run polls; the public can read.',
 		defaultVisibility: 'public',
 		roleSlug: 'github-dev',
 		// public-member-posts enables discussion + poll for members (post:poll +
 		// vote-poll grants) with public read.
 		presets: ['public-member-posts'],
-		policy: githubOauthPolicy()
+		policy: githubAgePolicy()
 	},
 	{
 		// (3) ASK-AN-X Q&A - public may ASK; only the role holders may ANSWER;