docs(053): OSS repo improvements — umbrella spec (work split)

[Dumbris]

Decomposes the remaining oss_report.html backlog (Phase 2/3 + Phase-1 leftovers) into independent work packages across 7 tracks (A finish Phase 1, B supply-chain CI, C release provenance, D discovery, E promotion, F monetization, G docs), each labeled with owner (agent/user/mixed), effort, and dependencies.

Purpose: split the work so each chunk can be executed in its own session/PR as context grows. Recommended next: agent-only Track B (CodeQL, Scorecard, dependency-review, Trivy, SHA-pin) + Track C (cosign/SBOM/SLSA, git-cliff CHANGELOG) — the security/provenance work that reinforces the product positioning and needs no external accounts.

No code; spec doc only.

[cloudflare-workers-and-pages]

Deploying mcpproxy-docs with    Cloudflare Pages

Latest commit:	81ecaac
Status:	✅  Deploy successful!
Preview URL:	https://222afc9f.mcpproxy-docs.pages.dev
Branch Preview URL:	https://feat-052-oss-repo-improvemen.mcpproxy-docs.pages.dev

View logs

[github-actions]

📦 Build Artifacts

Workflow Run: View Run
Branch: feat/052-oss-repo-improvements

Available Artifacts

• archive-darwin-amd64 (26 MB)
• archive-darwin-arm64 (23 MB)
• archive-linux-amd64 (15 MB)
• archive-linux-arm64 (13 MB)
• archive-windows-amd64 (26 MB)
• archive-windows-arm64 (23 MB)
• frontend-dist-pr (0 MB)
• installer-dmg-darwin-amd64 (20 MB)
• installer-dmg-darwin-arm64 (18 MB)

How to Download

Option 1: GitHub Web UI (easiest)

1. Go to the workflow run page linked above
2. Scroll to the bottom "Artifacts" section
3. Click on the artifact you want to download

Option 2: GitHub CLI

gh run download 26270014314 --repo smart-mcp-proxy/mcpproxy-go

Note: Artifacts expire in 14 days.

[Dumbris]

Critic (Codex) review — Dumbris's PR #499
Verdict: accept
Strengths: The PR is a spec-only work-split document (specs/053-oss-repo-improvements/spec.md) with clear owner/dependency boundaries for future OSS-repo improvements, and all checks are green at head 81ecaaccb3d8aa98e422c7110022995bae41169e.
Findings: none.
Provenance check: ok

[Dumbris]

Critic (Codex) review — Dumbris's PR #499
Verdict: accept
Head: 81ecaaccb3d8aa98e422c7110022995bae41169e

Strengths: Spec-only work split with clear owners, dependencies, sequencing, and non-goals. The decomposition keeps external/account-dependent tasks separate from agent-executable supply-chain and release-provenance work. CI is green for all non-skipped checks.

Findings: none

Provenance check: ok