Import Summon source

[nahiyankhan]

Summary

• Import tracked Summon source from summon-internal/main at 61bbe5f as a clean source commit with no private git history.
• Preserve the existing block/summon OSS template governance files: LICENSE, GOVERNANCE.md, CODEOWNERS, .github/ISSUE_TEMPLATE, and renovate.json.
• Replace the template README with a public beta README covering local development, demo use, security posture, and current package status.
• Keep existing @summon/* workspace package names for this import; public package boundary work remains a follow-up PR.
• Add Ghost-style CI with pinned Actions, Node 22, frozen pnpm install, typecheck, test, build, pack dry-run, and Playwright safety checks.

Notes

• The draft ACP branch is intentionally excluded from this import.
• This is not an npm publishing event.
• During frozen-install validation, I fixed two lockfile/package metadata issues that would have failed CI: the non-existent express@4.22.2 range now points at ^4.22.1, and the React adapter peer dependency entries are represented in pnpm-lock.yaml.

Validation

• pnpm install --frozen-lockfile
• pnpm typecheck
• pnpm test
• pnpm build
• pnpm pack:dry-run
• pnpm test:safety (local sandbox initially blocked the Vite bind on 127.0.0.1:5173; rerun with local bind permission passed 14 Playwright checks)
• git diff --check
• Clean import scans for generated files, secrets, and private/proprietary references

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.