[dgknttr]

Summary

• define Nupack as a small self-hosted NuGet V3 feed for internal packages with anonymous reads and separately protected publish/delete operations
• add storage-backed readiness, reliable container startup, named-volume first run, and a real push/restore/restart smoke gate
• remove obsolete scaffolding and legacy API-hosted UIs while aligning documentation, OpenAPI, roadmap, and GitHub discoverability

Compatibility

• legacy PackageSecurity:WriteApiKey remains available as a 0.x fallback
• authenticated reads remain optional and can be enforced at the network or reverse-proxy boundary

Verification

• 115/115 Release tests pass
• production Docker image build and container push/restore/restart/restore smoke pass
• default and S3 Docker Compose configurations validate
• independent final branch review completed with no actionable findings