feat: initial standalone skill setup for AI-driven blog creation

fix: prevent infinite onboarding tour by handling last step boundary

fix: Prisma 7 Docker compatibility — pg adapter, nodejs middleware runtime, config flag in entrypoint

fix: resolve code scanning alerts — HTML sanitization and double-decoding

chore: upgrade to Prisma 7 and react-joyride 3, bump dependencies

ci: CI/CD pipelines, Docker publishing, and repo hardening

fix: mark SafeHtml as client component to avoid jsdom ESM conflict in SSR

fix: sitemap still emits core/landing pages when PUBLIC_CONTENT_COMPANY_ID is unset

fix: enforce share-link expiry in API GET handler

fix: handle protocol-less domains in extractDomain

fix: improve SSRF protection in isSafeUrl — add metadata IP, IPv6, fix 172.16/12

fix: copy tsconfig.json to runner stage for worker path aliases

fix: use isomorphic-dompurify in SafeHtml for SSR compatibility

docs: rewrite README with product story and technical differentiators

fix: wire PUBLIC_CONTENT_COMPANY_ID, return null instead of throwing