v2.13.0 — Feedback intake loop

Highlights

• Feedback intake loop: POST /api/intake — private, redacted feedback submission from curl, MCP, agents, or sandbox environments
• Secret redaction: API keys, GitHub tokens, Slack tokens, AWS keys, PEM private keys, credit cards, credentials in URLs, and environment dumps stripped before persistence
• Intake classifier: Routes to lesson, bug, rescue, or noise — constrained output, no crashes on malformed input
• Demand board: Tracks intake clusters with states (new → reviewed → routed | rejected), maintainer override with history trail
• 17 new community lessons: Tailscale migration, Ghostty memory leak, K8s CrashLoopBackOff, ML-DSA cryptography debugging, TypeScript tsconfig trap, agent reward hacking, and more
• 3-month roadmap: v2.13 → v2.15 milestone requirements

New files

File	Purpose
scripts/intake_redact.py	Secret redaction module
scripts/intake_classify.py	Intake classifier
scripts/demand_board.py	Demand board data model + CLI
tests/test_intake_redaction.py	30 tests
tests/test_demand_board_model.py	24 tests
tests/test_intake_classify.py	17 tests

Non-blocking (deferred)

• --feedback flag (#622) — DCO blocked
• Smithery, Registry bump, GitHub /mcp — deferred to v2.15
• Auto-publish, auto-issue, auto-PR — out of scope