feat: publish Gamertan Web Foundations preview source

Export the reviewed application-neutral package set through the exact public allowlist. Development history and private application evidence remain outside this canonical source root.

Developed with material AI assistance under maintainer review.

Signed-off-by: Cole Speelman <crspeelman@gmail.com>

scripts/test-public-snapshot.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-only
+set -euo pipefail
+root=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+cd "$root"
+temporary=$(mktemp -d)
+trap 'rm -rf "$temporary"' EXIT
+./scripts/export-public.sh "$temporary/export"
+(cd "$temporary/export" && find . -type f -printf '%P\n' | sort) >"$temporary/actual"
+grep -Ev '^[[:space:]]*(#|$)' scripts/public-snapshot.allow | sort >"$temporary/expected"
+diff -u "$temporary/expected" "$temporary/actual"
+private_word='PRI''VATE'
+token_word='to''ken'
+private_pattern="BEGIN (RSA|OPENSSH|EC) ${private_word} KEY|Authorization: ${token_word}|/home/"'cole'"|/mnt/c/"'Users'"|"'eqlwiki'"-deploy|"'crspeelman'"@gmail\\.com"
+if rg -n --hidden --glob '!.git/**' "$private_pattern" "$temporary/export"; then
+	echo "private marker escaped into public snapshot" >&2; exit 1
+fi
+test -z "$(git status --porcelain=v1 --untracked-files=all)"