E00-S01-T01: create workspace/package manifests - root package.json pins packageManager pnpm@11.23.0 - pnpm-workspace.yaml separates apps/*, packages/*, extensions/* entries - skeleton manifests for apps/server, packages/core, extensions/example - committed frozen lockfile generated by pnpm 11.23.0 - minimal CI: pnpm install --frozen-lockfile + workspace verification
Ignores .env, .env.*, and node_modules/ at any depth so local secrets and dependency directories can never be committed accidentally. Single-file hygiene change; no tracked files affected. Closes #19.