feat: project canonical repository presentation assets

[szmyty]

Closes #54

Outcome

Adds an offline, deterministic repository-presentation projection for canonical README banners and evidence-badge visual assets.

What changed

• extends the reviewed .identity/ source with an optional repository-presentation document
• pins egohygiene/hygiene profile 1.0.0-alpha.1 at exact commit cb2ed63425d29abada2d2bbb43a3b3e59d11aeb8 and normalized digest
• keeps the pinned profile visibly proposed; Identity does not activate policy
• resolves approved organization banner defaults and bounded, approval-gated product overrides
• accepts an explicit Hygiene evidence document and never derives or fetches conformance state
• emits light, dark, and high-contrast banner variants at 640, 1000, and 1600 px in local SVG and PNG
• emits state-specific local SVG/PNG Hygienic badges for the exact caller-supplied state
• binds profile version, full represented commit, evidence URL, source identity, license, alt/fallback text, manifests, and checksums
• exposes a framework-neutral descriptor for Holon and repository tooling without editing README files
• adds organization-default, product-override, private, and missing-evidence fixtures
• documents regeneration, upgrade, rollback, and the authority boundary in ADR-018

Safety boundary

Identity owns visual intent and generated artifacts only. The package records editsReadme: false, evaluatesEvidence: false, networkRequired: false, and generatedRegionsOnly: true. Unknown, stale, failing, and every other non-passing state retain their exact Hygiene-owned message and cannot render as passing.

Validation

• python3 -m unittest discover --start-directory tests --pattern "test_*.py" — 78 passed
• focused repository-presentation suite — all 10 evidence states and 4 fixture scenarios passed
• documentation links, JSON parsing, Python compilation, release metadata, mascot, publication architecture/config, and Empathy extraction checks passed
• renderer source/unit/build/public packaging checks passed (21 renderer tests)
• local Rust and Playwright browser executables are unavailable in this workspace; required pinned toolchains are installed and exercised by GitHub Actions
• remote tree SHA 9bee367f3765fa83cc2ce88abcd3dad17dd23bbc exactly matches the locally reviewed tree

[devactivity-app]

Pull Request Summary by devActivity

Metrics

Achievements

• @szmyty
  Earned XP: 15⭐
  Check Your Progress