Post-publish hardening & housekeeping

[stefanwb]

Remaining setup/hardening backlog for claude-docker. Licensing, contribution docs, and branch protection are done; the rest are standard post-publish repo-owner tasks.

Done

• LICENSE — Apache License 2.0 added (docs: prepare repo for open-source release (Apache-2.0, headers, disclaimers) #4).
• CONTRIBUTING.md — reframed for public fork-and-branch contribution (docs: prepare repo for open-source release (Apache-2.0, headers, disclaimers) #4).
• Branch protection on main — repository ruleset "main protection": require PR + 1 approval (dismiss stale + last-push approval), require CI status checks (Validate, Docker build (validate, no push), strict/up-to-date), block force-push and deletion. Classic branch protection removed to avoid dual enforcement.

Remaining (repo-owner tasks)

• CODEOWNERS — add once the maintainer set is decided.
• GHCR image publishing — CI builds but does not push; consider publishing to ghcr.io/schubergphilis/claude-docker so consumers need not build locally.
• .mailmap — unify author-identity variants in git shortlog/blame (cosmetic).

[stefanwb]

Refocused from "inner-source readiness" to the post-publish backlog:

• LICENSE and CONTRIBUTING landed in docs: prepare repo for open-source release (Apache-2.0, headers, disclaimers) #4 — checked off.
• Visibility decision is public, via the OSS release approval process (in progress), so the inner-source / org-plan / Enterprise-visibility items are moot and were removed from the body.
• The 4 remaining items are genuine repo-owner tasks, kept above for tracking.

Leaving open until those are actioned by an owner.

[stefanwb]

Branch protection is now enforced via a repository ruleset (PR + 1 approval, required CI checks Validate + Docker build (validate, no push), no force-push/deletion). Migrated off classic protection to rulesets so it can be promoted to org-level if more repos are open-sourced. Signed-commit requirement intentionally dropped to keep external fork PRs frictionless. Checked off above.