Reposition Finitum as a dev-first open-source project

[richardhapb]

What

Executes the OSS pivot for the public-facing surface: legal/social scaffolding, contributor docs, and the web onboarding -- all aligned with the forwarding-based ingestion model the code already uses. No backend behavior changes.

OSS scaffolding

• LICENSE (MIT), matching what the README always claimed; also added to pyproject.toml metadata
• CONTRIBUTING.md centered on the add-a-bank flow, plus CODE_OF_CONDUCT.md (Contributor Covenant 2.1) and SECURITY.md (private reporting for the ingest webhook/auth surface)
• Issue templates (Add a bank with sanitization requirements, bug report, feature request) and a PR template

Docs

• README rewritten as the project front door: forwarding-based flow diagram, privacy positioning (no inbox access, Google login-only), supported-banks table, self-host quickstart, 3-step add-your-bank summary, roadmap (webhooks, i18n, multi-bank)
• docs/adding-a-bank.md: the full contributor guide, with corrected paths (root categories.json, src/category_catalog.py, tests/test_parse.py), the required transferenceMatches key the old README example omitted, a field reference table, and the parsers.test_parse debugging CLI
• docs/deployment.md: operator notes moved out of the README (EC2 references corrected to the VPS, secret names fixed to HOST_ADDRESS/HOST_USER/HOST_SSH_KEY)
• web/README.md rewritten to describe the actual React Router v7 app
• CLAUDE.md capturing the project direction for agent sessions

Web repositioning

• Landing (home.tsx): forwarding + OSS messaging, GitHub links, live supported-banks section fed by the public GET /banks, replaces the OAuth/Gmail compliance framing
• Guide (guide.tsx): steps rewritten to the forwarding flow (account -> ingest address -> forwarding rule -> automatic parsing -> dashboard) with a "bank not supported?" contribution card
• Privacy/Terms (routes + terms/*.txt): Gmail-access language replaced with the forwarding model; Google sign-in described as login-only; OSS/self-host mention added
• Root meta tags updated (lang="en", forwarding-based descriptions)

Verification

• uv run pytest: 85 passed
• bun run typecheck: clean
• bun run lint: fails with pre-existing errors only (34 on main, 31 on this branch; none in rewritten files)
• ruff findings are pre-existing in an untouched alembic migration

🤖 Generated with Claude Code