v0.5.5 — the copy other people get

Nothing in the runtime changed (the tool surface is byte-identical to 0.5.4). Everything here is about the copy of this repository other people get.

Fixed — three things that only ever failed somewhere else

• pnpm install had never worked on any version: the licence collector in prepare assembled node_modules/<name> by hand, which is npm's layout — under pnpm the first segment is .pnpm, the content-addressed store, and reading its package.json is an ENOENT that fails the whole install. Package roots now come from the bundler's own input paths. (This is also why the Glama build of this repo had never gone green.)
• The public repository's CI had never been green: npm test is an && chain with a docs-reading suite second, and docs/ never enters a public snapshot — so the other 21 suites had never run here at all. Verified against the real snapshot: npm ci, node build.mjs, npm test all exit 0.
• require("@2nd1st/open-mcp-apps/package.json") threw ERR_PACKAGE_PATH_NOT_EXPORTED.

Added — a Dockerfile that actually runs the server (with the glibc/prebuilt trap that makes a green build die on first query written into the file), .mcp.json, and the registry contracts that had been living in a scratch directory.

Changed — both READMEs rebuilt for the reader they actually have: a fact table and three complete host-config blocks first, deep material below. Two quoted assertion counts turned out to be wrong.

Full detail: CHANGELOG.md