feat: classify and gate publishable templates

[xiongxz]

Summary

• classify every catalog template with an immutable publishing compatibility contract
• add controlled native profiles and runtime-config bootstrapping for publishable Vite templates
• convert the Todo starter to a verified Next.js static export
• add CI admission for lockfiles, fixed build scripts, dependency install, production output, runtime config, credentials, homepage and deep-link routing

Scope

This PR targets the production fork baseline lexmount/insforge-templates:main and contains only template publishing compatibility work.

Compatibility

• Native: admin-dashboard, insight-flow-agent-chat, web-research-agent, website-change-monitor, React starter, Todo starter
• Requires Node runtime: e-commerce, landing, crm, booking, chatbot, ai-pdf-chatbot, workspace
• Generic Next.js starter remains Node-runtime-only

Validation

• npm --prefix scripts test (17 passed)
• node scripts/validate-registry.mjs (11 templates)
• real Vite+npm frozen-lockfile build and artifact admission for insight-flow-agent-chat
• real Next.js static-export build and artifact admission for Todo (out/index.html, out/404.html, 20 files)
• all registry-native Vite templates and React starter previously completed production build/admission in this branch

Companion platform PR: https://github.com/lexmount/insforge-platform/pull/74
Companion UI PR: https://github.com/lexmount/insight-flow/pull/830

[xiongxz]

Companion PRs:

• Platform/Publisher: https://github.com/lexmount/insforge-platform/pull/74
• Creation UX/Agent Context: https://github.com/lexmount/insight-flow/pull/830

This supersedes the closed, oversized upstream PR InsForge#59.

[xiongxz]

按产品确认恢复 npm：insight-flow-agent-chat 继续使用原有 package-lock.json，buildProfile 改回 vite-npm-v1，并移除本 PR 引入的 pnpm 锁文件和 packageManager 声明。PR 相对 main 现为 19 files、+148/-49。已通过 npm ci、生产构建、Vite 产物准入、17 个 Registry 测试和 11-template 校验。