feat: add YAML frontmatter, bitcoin-conventions skill, path rules, and Gitea CI

- Added YAML frontmatter to all 8 polish-* skills and sweep skill
  so Claude can auto-invoke them
- New bitcoin-conventions skill with PROUX UX methodology, sats display,
  address validation, Tor preferences, Lightning patterns
- Path-specific rules for containers (security hardening) and frontend
  (Vue/glassmorphism conventions)
- Gitea Actions: nightly security review and weekly dependency audit

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.claude/rules/frontend.md

@@ -0,0 +1,16 @@
+---
+globs:
+  - "**/neode-ui/**"
+  - "**/*.vue"
+---
+
+# Frontend Rules (Archipelago)
+
+- Always use `<script setup lang="ts">` in Vue components
+- Global CSS classes go in `style.css`, never inline Tailwind utilities
+- Use `.glass-button` for ALL buttons — `.gradient-button` is BANNED
+- Use Pinia stores for shared state, never provide/inject for cross-component data
+- Every async view needs: loading state, empty state, and error state
+- Trim all text inputs before submission
+- Disable submit buttons during async operations
+- Use `errorMessage` ref pattern for user-visible errors, not just console.log