feat: initial release of Protocol Droid v0.2.0

A tool for authoring, sharing, and curating social protocols.

Features:
- Protocol library with search, tag filtering, and sort by date/relevance
- Protocol authoring with structured fields (title, description, steps, outcome, practice, source, tags)
- Protocol forking with provenance tracking
- Collection creation with searchable protocol picker and ordering
- User accounts with roles (admin, member, viewer)
- YAML import/export for portability
- Self-hostable on LAMP/Cloudron, works in subdirectories
- Responsive design with hamburger menu on mobile
- About page

Security:
- CSRF protection via Origin/Referer validation
- Session regeneration on login/register
- Secure session cookie params (HttpOnly, SameSite, Secure)
- Visibility enforcement on private/unlisted items
- YAML object injection hardening
- Login rate limiting
- Path traversal protection
- Input validation and length clamping
- Vote value constraining

Stack: PHP 8.x + MySQL/MariaDB, vanilla JS frontend, no external dependencies.

Hippocratic License (HL3-CORE).

config.yaml

@@ -0,0 +1,21 @@
+# Protocol Droid Configuration
+# This file is for whitelabel customization.
+# Database config (in the config table) takes precedence over values here.
+
+site:
+  name: Protocol Droid           # becomes the header logo text
+  tagline: A commons of social protocols
+
+registration:
+  enabled: true                   # allow open registration
+  require_approval: false         # admin must approve new accounts
+
+sso:
+  enabled: false
+  provider: oidc                  # oidc, github, google, custom
+  client_id: ""
+  client_secret: ""
+  discover_url: ""
+
+# Seed protocols are loaded from seeds/*.yaml on first setup
+# or when an admin triggers /api/seed