Improve seed vendor discovery and MCP audit outputs

[keon0711]

Summary

• Replace static vendor-lead-discovery output with live GitHub repository discovery, scoring, evidence links, and concrete Pyrimid product suggestions
• Expand mcp-server-audit into a public-URL inspection with monetization readiness, paid-tool recommendations, catalog metadata, risk notes, and implementation checks
• Add safe URL handling for audit fetches and fallback lead output when GitHub search is unavailable

Bounty relevance

• Addresses monetizeyouragent/Pyrimid bounty Improve mcp-server-audit monetization output #25: improve vendor-lead-discovery output
• Also improves bounty Improve vendor lead discovery output #26 surface: mcp-server-audit output

Verification

• npx tsc --noEmit passes
• npm run build and npm run lint could not run in this local environment because Node is 18.12.1; Next requires >=18.18.0

[keon0711]

Bounty submission note:

This PR targets the active Monetize Your Agent / Pyrimid bounties:

• Improve mcp-server-audit monetization output #25: improve vendor-lead-discovery output
• Improve vendor lead discovery output #26: improve mcp-server-audit output

It adds live GitHub/MCP/x402 lead discovery with scoring and clean JSON output, and upgrades MCP audits with URL inspection, monetization recommendations, pricing, route shape, catalog metadata, and risk notes.

Verification run locally:

• npx tsc --noEmit passes
• npm run build / npm run lint were blocked by local Node 18.12.1; Next requires >=18.18.0

Payout address if accepted: 0x4E896b4231d9cF59f18e2Ce4BE45600f24c277e8

[keon0711]

Additional bounty coverage:

I also expanded examples/mcp-paid-tool/README.md to target MYA/Pyrimid bounty #24: paid MCP tool guide. The guide now includes a working Pyrimid endpoint reference, 402 response example, catalog metadata fields, a minimal paid route, MCP wrapper tools, and a reproducibility checklist.

Payout address if #24 is accepted as well: 0x4E896b4231d9cF59f18e2Ce4BE45600f24c277e8

[keon0711]

Verification update:

I re-ran the production build under Node 20.20.2 by putting the Node 20 binary first on PATH:

• PATH=<node20bin>:$PATH npm run build passes
• npx tsc --noEmit passed previously
• npm run lint still does not run non-interactively because this repo has no committed ESLint config and next lint prompts to configure ESLint; I did not add unrelated lint configuration in this bounty PR.

This confirms the API/product changes compile and the Next.js production build completes successfully.