* chore: remove operator-internal kill-gate file

* chore: remove operator-internal landing-copy draft

* fix(pyproject): correct project URLs to plusultra-tools; drop unused pydantic dep

- Homepage/Issues URLs were pointing at github.com/plusultra/... (404, wrong org slug).
  Replaced with github.com/plusultra-tools/... per red-team blocker A.
- pydantic>=2.0 was declared but never imported anywhere in src/. Removed to
  avoid forcing a ~5 MB transitive dep for a feature that does not exist
  (red-team major B/A).

* docs(readme): honest v0.1-scaffold framing; strike overclaims

Per red-team blockers (Persona C/E #1, Persona A #2):
- Replace 'zero-config validator' pitch with explicit 'scaffold, not validator'
  status block at the top. Almost any resource returns valid=true in v0.1; this is
  documented expectation.
- Strike 'Hosted CI-as-a-service €19-49/mo' pricing block (no DPA, no Stripe, no
  legal entity; premature commercial claim).
- Strike r/HL7 distribution claim (subreddit does not exist).
- Add badges (CI, Python, License, Status).
- Add explicit 'Use HAPI/Firely if you need real validation today' callout.
- Add HL7/FHIR trademark attribution.
- Drop pricing entirely until a design partner exists.

* fix(igs): fail-closed on placeholder packs in verify_pack_integrity

Per red-team Persona D blocker: v0.1.0 returned True for any bytes when the
manifest entry was marked placeholder=true. In v0.2 (when real packs ship)
this would be a supply-chain hole: an attacker re-flagging a tampered pack
as placeholder bypasses verification silently.

Fix: placeholder entries have NO integrity claim by construction and now
always return False. Callers that want to accept a placeholder must
inspect get_ig(name).placeholder explicitly; verify_pack_integrity will
never assert 'verified' for them.

Adds 3 regression tests covering unknown IG, default fail-closed, and
opted-in path.

* ci: SHA-pin GitHub Actions; add Dependabot for actions+pip

Per red-team Persona D major:
- Pin actions/checkout@v4 to commit 34e114876b0b... (full SHA)
- Pin actions/setup-python@v5 to commit a26af69be951... (full SHA)
- Tag-based pinning lets a compromise of the action publisher's release tag
  propagate to all downstream pipelines; SHA-pinning prevents that.
- Trailing comment preserves the human-readable version for review.
- Add dependabot.yml so action+pip pins are kept fresh with reviewed PRs
  (weekly schedule, cap 5 open PRs per ecosystem).

* docs: add CONTRIBUTING.md with PHI-redaction guidance; align CHANGELOG date

Per red-team Persona A major + Persona C blocker:
- CONTRIBUTING.md was missing. New file covers dev install, test command,
  PHI redaction rules for bug reports, PR checklist (no real PHI, manifest
  sha256 either real or placeholder).
- CHANGELOG was dated 2026-05-14 (workspace build date) but the repo
  pushed 2026-05-15. Align to actual publish date so wheel metadata
  matches.
- Document the fail-closed change + Actions SHA-pin under Security.

* fix(cli): cap input resource size + reject non-object top-level JSON

Per red-team Persona D major:
- Without an upper bound on resource size, a 1 GB JSON file will OOM the
  process. Reject anything over 100 MB by default (FHIR resources in
  practice are <1 MB; this is a generous Bundle ceiling). Tunable via
  FHIRV_MAX_RESOURCE_BYTES env var.
- Reject top-level JSON arrays / scalars early (must be a resource object).
  Previously these would crash in validator with unhelpful tracebacks.

* docs(security): CRA-aligned timelines, placeholder-pack reality, PHI handling

Per red-team Persona C minor + D major + C blocker:
- Note CRA Annex VII alignment from late 2027 (24h notification for actively
  exploited vulns); v0.1 stays at best-effort 72h pre-CRA.
- Reflect the fail-closed change: placeholder packs have no integrity claim
  by construction. Real verification arrives with real packs in v0.2.
- Mention the 100 MB input cap as partial DoS mitigation.
- Forbid PHI in issues; point to CONTRIBUTING for redaction guidance.

* chore(deps): bump actions/checkout from 4.3.1 to 6.0.2

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@34e1148...de0fac2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: plusultra-ops <plusultra.dev@proton.me>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>