Publish hardened SnapMeter Mini App

[ael-dev3]

Summary

• harden collector, Worker ingest, pseudonymization, logging, request bounds, and single-collector integrity
• ship the signed Farcaster Mini App, Quick Auth, synchronized DAU dashboard, and current assets
• add MIT licensing for SnapMeter-authored work, GPL notice for vendored Snapchain protobufs, generated bundle notices, security policy, and exact local reconstruction instructions
• add publication secret scanning, dependency review, CodeQL, and fail-closed release verification

Validation

• Node 24 / pnpm 11.19 frozen install
• lint and typecheck
• 224 unit and integration tests
• production build and signed Mini App verification
• 7 responsive Playwright tests
• clean local D1 migrations 0001 through 0005
• publication scan and production dependency audit clean

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.