[codex] protect public tessellate boundary

[kfrrst]

Summary

• restructures the public repo as a source-visible Tessellate skeleton while keeping private Surface implementation in tessellate-private
• removes fee-avoidance / platform-clone positioning and switches public package/license metadata to all-rights-reserved / UNLICENSED
• replaces Bloomber/Arcadia example registries with neutral Tessellate examples and adds public Surface context docs/schema/example
• adds a CI public-boundary guard to prevent private Surface runtime files, risky positioning, or host-specific examples from drifting back into the public repo

Validation

• npm run typecheck in plugin/
• node --test plugin/__tests__/*.test.mjs
• node --test scripts/__tests__/*.test.mjs
• node scripts/check-sandbox-safety.mjs
• node compiler/src/cli.mjs --help
• git diff --check

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!