Changelog
- 411aa91 chore(npm): mark root package.json private
- 3bfa934 chore(renovate): track pinned npm packages via custom manager
- 6faa37f docs(quickstart): document npm hardening recommendations
- f9a147c fix(security): pin and harden generated npm commands
- a137aae fix(skillregistry): discover workspace OpenCode skills
- ea5f187 refactor(versions): centralize pinned npm package versions