Refresh Persona starter kit

[JacbK]

What changed

• Rewrote the project page, README, materials copy, setup guidance, and deployment skill.
• Replaced the old setup script with a smaller local-only flow that does not collect tokens or edit global agent settings.
• Upgraded the compatible Next.js, React, and tooling stack and removed unused packages.
• Locked config and upload routes to local development, added YAML validation, upload limits and type checks, and real file deletion.
• Split config data and logic into focused modules and added 11 tests.
• Added CI, Dependabot, manual and gated deployments, and an MIT license.

Why

The starter kit had stale requirements and model copy, failing automatic deployment workflows, no tests, 11 dependency vulnerabilities, and production-accessible setup APIs. The onboarding also made stronger promises than the actual setup flow.

Impact

New users get clearer setup instructions, safer local handling of personal materials, predictable manual deployments, and a starter kit that can keep itself current. Existing portfolio output remains compatible with the same profile fields.

Validation

• npm run check
• npm run audit — 0 vulnerabilities
• 11 Vitest tests
• Normal Next.js production build
• GitHub Pages static-export build
• Production smoke: homepage 200; config/write/delete routes 404
• Desktop and mobile browser verification with no console errors or horizontal overflow