Prepare EMUAdvisor for public portfolio release

[AFR0011]

Summary

Prepare EMUAdvisor for public portfolio release with its RAG architecture, evaluation scope, security model, dependency snapshot, and institutional boundary clearly documented.

Completed

• added an MIT License
• recorded eval_sets/v1_gold.jsonl as the 60-case human-reviewed verified gold set reviewed by the project author and university staff
• updated gold cases with machine-readable review/correctness/citation metadata
• kept v1_hard as a separate hard regression suite
• kept emu_gold_seed explicitly provisional under its historical filename
• rewrote the README around architecture, evaluation scope, setup, APIs, Qdrant, verification, limitations, and the independent-project disclaimer
• refreshed demo metrics, board-readiness, publication, and security documentation
• added a pinned Python 3.12 dependency snapshot in requirements-lock.txt
• added required pip-audit CI; the pinned environment reports no known vulnerabilities
• added tools/publication_guard.py for verified-gold metadata, release files, and admin-authentication invariants
• removed admin-token ingestion from URL/query parameters at browser and server layers
• added browser token entry using tab-scoped sessionStorage and Authorization: Bearer headers
• kept the static /admin shell reachable for entering credentials while protecting diagnostic/data APIs
• made browser smoke a required CI job
• updated unit tests for the verified-gold contract and header-only admin authentication

Final verification

• publication guard: pass
• pinned dependency installation: pass
• pip-audit: pass — no known vulnerabilities found
• syntax scan: pass
• unit tests: pass — 69 tests
• v1_gold validation: pass
• v1_hard validation: pass
• emu_gold_seed validation: pass
• verified gold review-status check: pass
• auxiliary evaluation reporting: pass
• required Playwright/browser smoke: pass

Release note

Before changing repository visibility, review historical Git objects for old secrets, generated artifacts, or non-public material. Current-tree publication guards and tests are green.

EMUAdvisor is an independent research/software project and is not an official Eastern Mediterranean University administrative service.