feat(week4): AC 1 CI/CD + AC 2 Deploy - extension zip, auto release, README

[BODMAT]

What

Closes Week 4 AC 1 (CI/CD) and AC 2 (Deploy). Adds extension packaging script, automated GitHub Release on every merge to main, and updates README to reflect the current state of the project.

AC 1 — CI/CD

lint + typecheck on every PR	✅ already in ci.yml (dashboard + extension)
PR blocked if checks fail	✅ branch protection rules configured manually in GitHub Settings
Auto-deploy to Vercel on merge to main	✅ Vercel GitHub integration already connected
Auto GitHub Release with extension zip	✅ new release-extension.yml — triggers on push to main

AC 2 — Deploy

Dashboard deployed on Vercel + Neon	✅ already live
Extension packaged as .zip with install instructions	✅ npm run zip in extension/
.env.example up to date	✅ CRON_SECRET added in previous PR
README accurate	✅ updated this PR

Changes

Code

• extension/package.json — added "zip" script via powershell Compress-Archive (no extra dependencies, works on Windows locally)
• .github/workflows/release-extension.yml — on push to main: npm ci → build → zip via pwsh (PowerShell Core, available on ubuntu-latest) → gh release create with zip as asset; tag: extension-build-{run_number}

Docs

• README.md — replaced jsonwebtoken → jose in tech stack; "AI TBD" → Groq; added "Load from .zip" instructions; updated Verifying section; removed Week 1-specific notes
• plans/week4/deploy-polish.md — updated plan: bestzip → PowerShell, manual release → auto CI release

Design decisions

• PowerShell Compress-Archive over bestzip/zip — zero new dependencies; powershell for local Windows, pwsh (PowerShell Core) for CI on ubuntu-latest
• *.zip not committed — already in root .gitignore; artifact generated on demand
• gh release create over softprops/action-gh-release — built-in CLI, no third-party action needed; GITHUB_TOKEN is automatic
• Tag per run number — extension-build-{N} keeps all releases in history; no overwrite semantics

Verification

• npm run zip locally → worktrace-extension.zip created ✓
• Unzipped and loaded in Chrome via Load unpacked → extension works ✓
• release-extension.yml will trigger automatically on merge to main

Closes

• Week 4 AC 1 — CI/CD (docs/Task.md)
• Week 4 AC 2 — Deploy (docs/Task.md)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
worktrace	Ready	Preview, Comment	Jun 2, 2026 3:20pm