Align with the Samebase repository standards

[nicu-chiciuc]

Aligns the repository with the Samebase base template standards. No behavior change and no version bump, so the release workflow publishes nothing.

Changes

• Node and pnpm: .node-version is 24. engines is { "node": ">=24.11.0", "pnpm": ">=11.18.0" }. Both workflows already use node-version: 24.
• Git hooks: prepare runs vp config --no-agent. vite.config.ts has the template staged block ("*": "vp check --fix"). .vite-hooks/pre-commit runs vp staged. The generated .vite-hooks/_/ ignores itself, as in the template.
• Build: pnpm run build runs vp pack. The pack block in vite.config.ts writes lib/index.js, lib/index.d.ts, and their source maps, then runs publint and attw. attw uses the esm-only profile, because the package is ESM only (the strict profile reports the node10 and node16-cjs modes). failOnWarn makes a publint or attw finding fail the build. fixedExtension: false keeps index.js, the file that exports names. New devDependencies: publint and @arethetypeswrong/core. Deleted tsconfig.build.json and the rewriteRelativeImportExtensions setting.
• test:live runs node ./scripts/test-live.ts. The script sets ALCHEMY_WORKERS_BUILDS_LIVE=1 in the child environment, starts vp test --run test/live through Node, and forwards the exit code. It works on Windows. tsconfig.json now includes scripts.
• Docs: SECURITY.md from the template. A short AGENTS.md with the repository rules, including the ownership rule. README: the live test script, the Node and pnpm versions, the pre-commit hook, and the release flow (the old text said to push a v* tag).

Results

• pnpm run check: pass. Format, lint, and typecheck are clean. Tests: 4 files passed, 3 skipped; 79 tests passed, 3 skipped (the live tests).
• pnpm run build: pass. lib/index.js 33.06 kB, lib/index.d.ts 13.45 kB, and the maps. attw: no problems found. publint: no issues found.
• Runtime exports of lib/index.js are the same 9 names as the previous tsc build.
• A fresh clone with pnpm install --frozen-lockfile installs the hook and passes check and build.

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}