🏗️🔨 Onboard template into SealGate CLI (cli-only)

[Miyamura80]

Summary

Runs sealg init --profile cli-only to turn the Rust server+CLI template into a standalone CLI for sealgate.ai, then finishes the manual cleanup the onboarding step leaves behind (dead feature code, CI matrix, Makefile targets, docs) so the repo is coherent as a pure CLI.

Changes

Onboarding (rename + prune)

• Rename sentinels: Rust-Template → SealGate, appctl → sealg, Miyamura80 → Edison-Watch.
• Prune the HTTP API, frontend/, docs/ site, and Dockerfile; drop the http-api cargo feature and delete serve_http.rs.

Manual cleanup after prune

• crates/cli: remove the now-dangling http-api feature, its optional deps (axum/tower/tower-http/app-config), the serve subcommand, and the dead mod serve_http (the deleted file broke cargo fmt).
• rust_checks.yaml: drop the http-api-only clippy/test matrix steps (feature no longer exists → would hard-fail CI).
• Makefile: remove dead run/dev/docs targets; fix the setup and link-check messages that referenced the server and docs site.
• Remove the docs-lint and jules-sync-translations workflows (only triggered on docs/**, now gone).
• knip.json: re-scope analysis to scripts/ after the frontend workspace entry was pruned; reformat package.json/knip.json to tabs for Biome.
• Refresh CLAUDE.md, README.md, and crate READMEs to describe the CLI-only shape; fix CODEOWNERS, command.rs.tpl, and the bun.lock package name.

Testing

• Tests pass (cargo test --workspace + the cli-only feature matrix: 35 + workspace suites green)
• Linting passes — cargo fmt/clippy, knip, biome, file-length, import-boundary, ai-writing, and agent-config-sync all pass locally. sealg call ping returns {"pong": true}. (make ci's audit/link-check need network/lychee and are left to CI.)

Related Issues

Closes #

🤖 Generated with Claude Code

https://claude.ai/code/session_01BDavmzv8cY6ywCGr7yiqrS

---

Generated by Claude Code

---

Summary by cubic

Turns the Rust server+CLI template into a standalone CLI for SealGate by running sealg init --profile cli-only and finishing cleanup. The repo is now pure CLI: the HTTP API, frontend/, docs/, and Dockerfile are gone, and the serve subcommand no longer exists.

Onboarding rename

• Renames template sentinels: Rust-Template → SealGate, appctl → sealg, Miyamura80 → Edison-Watch.
• Drops the http-api cargo feature and deletes serve_http.rs.

Cleanup after prune

• Removes the serve subcommand and its now-dangling axum/tower/tower-http/app-config deps from crates/cli.
• Removes the http-api-only clippy/test matrix steps from rust_checks.yaml and dead run/dev/docs Makefile targets.
• Deletes the docs-lint and jules-sync-translations workflows and re-scopes knip.json to scripts/.
• Rewrites CLAUDE.md, README.md, crate READMEs, CODEOWNERS, command.rs.tpl, and the bun.lock package name for the CLI-only shape.
• Makes engine::current_os() return std::env::consts::OS directly to fix clippy 1.98's needless_match under -D warnings.
• Bumps h2 to 0.4.19 in Cargo.lock (lockfile-only, semver-compatible) to clear the pre-existing transitive RUSTSEC-2026-0258 advisory.

^{Written for commit c4e4c6e. Summary will update on new commits.}

[qodo-code-review]

ⓘ Qodo reviews are paused because the subscription is no longer active. Ask your workspace admin to reactivate the subscription to resume reviews. Manage billing

[Miyamura80]

CI fix pushed (98b5426): the Clippy + Tests check failed on crates/engine/src/types.rs:177 with clippy::needless_match.

This is not caused by this PR — types.rs is untouched by the onboarding change. It's a pre-existing lint that would fail main identically: rust-toolchain.toml pins channel = "stable", and CI's stable moved from 1.94 to 1.98.0, where needless_match now denies current_os()'s arm-by-arm match over std::env::consts::OS.

I folded the one-line, behavior-preserving fix into this PR rather than leaving CI red (the match was an identity over std::env::consts::OS, so it now returns that directly). Reproduced the failure and verified green under the pinned stable 1.98 toolchain (clippy --workspace + the cli-only feature matrix, tests, and fmt all pass).

---

Generated by Claude Code

[Miyamura80]

Second CI fix pushed (c4e4c6e): the Cargo Deny check failed on its advisories gate — RUSTSEC-2026-0258 (h2 0.4.13, unbounded empty DATA frames, low severity), pulled transitively via reqwest → hyper → h2.

Also not introduced by this PR — it's a newly-published advisory on a transitive dependency, so it affects main too. Fix is the advisory's own recommendation: a lockfile-only, semver-compatible bump h2 0.4.13 → 0.4.19 (cargo update -p h2, >=0.4.16 required). No manifest changes; workspace build verified green.

Both original CI failures (Clippy + Tests and Cargo Deny) were pre-existing base issues surfaced by toolchain/advisory updates, now resolved. Waiting on the re-run against c4e4c6e.

---

Generated by Claude Code