feat(release): ship local-first desktop distribution

Retire the hosted deploy path and publish the current worktree as a local-first desktop release.

This aligns desktop auth, the Linux sidecar, curl/npm installers, and the npm/AUR release pipeline for v0.1.27.

Author: kaizen403

.env.example

@@ -1,35 +1,5 @@
-# Database Configuration
-DATABASE_URL=postgresql://openlinear:openlinear@localhost:5432/openlinear
-
-# GitHub OAuth App (create at https://github.com/settings/developers)
-# 1. Go to GitHub → Settings → Developer Settings → OAuth Apps → New
-# 2. Set Homepage URL: http://localhost:3000
-# 3. Set Callback URL: http://localhost:3001/api/auth/github/callback
-# 4. Copy Client ID and generate a Client Secret
-GITHUB_CLIENT_ID=
-GITHUB_CLIENT_SECRET=
-GITHUB_REDIRECT_URI=http://localhost:3001/api/auth/github/callback
-
-# Optional: personal access token for higher rate limits on public repo fetches
-GITHUB_TOKEN=
-
-# JWT signing secret (change in production)
-JWT_SECRET=openlinear-dev-secret-change-in-production
-
-# Frontend URL (for OAuth redirect back)
-FRONTEND_URL=http://localhost:3000
-
-# CORS origin
-CORS_ORIGIN=http://localhost:3000
-
-# API server port (kept app-scoped via API_PORT to avoid affecting Next.js web port)
-API_PORT=3001
-
-# Desktop UI API URL (override when API is not on localhost:3001)
-NEXT_PUBLIC_API_URL=http://localhost:3001
-
-# Brainstorm AI Configuration
-BRAINSTORM_API_KEY=          # Your LLM API key (OpenAI or Anthropic)
-BRAINSTORM_MODEL=gpt-4o-mini # Model to use (default: gpt-4o-mini)
-BRAINSTORM_PROVIDER=openai   # Provider: openai or anthropic
-BRAINSTORM_BASE_URL=         # Optional: custom base URL
+# The supported hosted surface is now the static landing site in `apps/landing`.
+# It does not require runtime environment variables for normal deployment.
+#
+# Historical desktop/API variables are omitted from this file because those services
+# are no longer the supported production path.

.github/workflows/ci.yml

@@ -0,0 +1,49 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+env:
+  TURBO_TELEMETRY_DISABLED: 1
+
+jobs:
+  release-readiness:
+    name: Release Readiness
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Verify Arch package metadata
+        run: |
+          set -euo pipefail
+          bash ./scripts/sync-aur-metadata.sh
+          git diff --exit-code -- packaging/aur/openlinear-bin/PKGBUILD packaging/aur/openlinear-bin/.SRCINFO
+
+      - name: Build sidecar artifacts
+        run: bash ./scripts/build-sidecar.sh
+
+      - name: Typecheck desktop UI
+        run: pnpm --filter @openlinear/desktop-ui lint
+
+      - name: Build npm package
+        run: pnpm --filter ./packages/openlinear build