feat: define template distribution catalog

[kraus-it]

Summary

• adopt Apache-2.0 for the sample catalog
• define 20 satellite repositories with metadata, campaigns, verification commands, and preview eligibility
• add a validated distribution manifest and packaging/readme standards
• remove tracked Android local SDK configuration and align Laravel package metadata

Tests

• cd distribution && npm ci && npm run validate
• cd distribution && npm audit --audit-level=moderate
• git diff --check

Slice

1 of 6: license, inventory, metadata, manifest, and packaging standard

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[kraus-it]

@claude Please review this slice for correctness, security boundaries, manifest completeness, and maintainability. Focus especially on licensing propagation, generated-repository safety, and validation gaps.

[kraus-it]

Local Claude Code review completed after the repository action reported that CLAUDE_CODE_OAUTH_TOKEN is not configured here.

Findings addressed in this PR:

• hardened kind, stackblitz, uniqueness, topic, license, count, and ready-source validation with negative tests
• removed tracked Android/PHP workstation artifacts
• propagated Apache-2.0 into JavaScript and Laravel package metadata
• restricted @claude triggers to trusted repository roles
• made missing Claude credentials an explicit non-failing skip instead of a misleading action failure

Final Claude review result: NO_ACTIONABLE_FINDINGS.

Local verification: 7/7 validator tests pass, the 20-entry catalog validates, npm audit --audit-level=moderate reports 0 vulnerabilities, workflow YAML parses, and git diff --check passes.