Improve seed product outputs for lead discovery and MCP audits

[nieniedeveloper]

Summary

• move seed paid-product response generation into a dedicated helper
• improve vendor-lead-discovery with live GitHub repository search, scoring, source metadata, and fallback leads
• improve mcp-server-audit with GitHub repo inspection, monetization-fit scoring, paid tool recommendations, x402 route shape, catalog metadata, and risk notes

Why

The current seed product outputs are mostly static examples. The MYA jobs ask for more useful live lead discovery and MCP audit output. This keeps the existing API route shape but returns more actionable JSON for the two paid seed products.

Verification

• npm run build
• scanned touched files for accidental private payment details, email addresses, private keys, seed phrases, and prompt/context leakage

Notes

• GitHub API calls use public unauthenticated requests by default, with optional GITHUB_TOKEN support if available.
• Arbitrary non-GitHub URLs are not fetched in mcp-server-audit; they use URL heuristics to avoid SSRF-style behavior.