Sync public project tooling and safety updates

[jvogan]

Summary

• add project linting, voice-bible analysis, and portable export-pack manifests
• add bounded OGG input handling and clearer model-download progress and failures
• align public model licensing, guidance, and long-form documentation
• strengthen public-repository disclosure and secret validation

Safety

• current-tree, include-ignored secret, and Git-history scans pass
• stale publication-process documents were removed
• no private paths, credentials, or internal working material are included

Validation

• make validate-public
• ModelKit: 110 tests
• Persistence: 80 tests
• Core: 195 tests
• CLI: 59 tests
• daemon and CLI builds
• bridge dependency audit and TypeScript typecheck

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 248ee187dc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Handle duplicate speaker profile names

When a project contains two speaker profiles with the same name (including case-only variants like Narrator and narrator), this Dictionary(uniqueKeysWithValues:) call traps at runtime with a duplicate-key precondition failure. The app/store paths allow multiple ProjectSpeakerRecords distinguished only by UUID, so projects lint and projects export-pack can crash on valid existing project data instead of producing a voice bible; group or otherwise disambiguate duplicate names before building the lookup.

Useful? React with 👍 / 👎.