Prepare the tod-ai release

[tylerhogarth]

Milestone 5 of the v0.1 plan, up to the maintainer-only steps: everything needed so npm publish is the last remaining action.

Changes

• Distribution: the published bin is now a node-target bundle (dist/cli.js via scripts/build.ts) instead of a bun-shebang source file, so npm install -g tod-ai works on machines that have node but not bun. prepublishOnly gates publishing on the full check suite plus the build; the packed tarball contains only dist/, README, and LICENSE (verified).
• Docs: full README (how it works, install, command reference, supported agents) and CONTRIBUTING (PR-only delivery, safety rules, scope non-goals, release process).
• Tests (tests/package.test.ts): package metadata assertions, a build-and-run-under-node check, and a repo-hygiene scan that fails if any committed file contains the local home path.

Remaining before v0.1 ships (maintainer)

1. Dogfood pass with real agent sessions (plan TC-11 through TC-16).
2. npm publish (needs the npm account; prepublishOnly handles the gates).
3. Close-out PR: tick verified acceptance criteria and delete project/tod-v0.1/.

🤖 Generated with Claude Code