Add the 22-factor app manifesto

[ORESoftware]

Summary

• publish a first-class /22-factor-app/ route that preserves the original twelve factors and defines Factors XIII–XXII as an independent ORESoftware extension
• codify encrypted configuration in tracked env/enc/*.env.enc, disposable ignored plaintext in env/dec/*.env, and a deliberately tiny one-or-two-secret Fiducia Cloud bootstrap boundary
• add OCI-without-Docker packaging, risk-matched virtualized isolation, immutable machine images, recoverable TCP/WebSocket sessions, tag-based releases, accountable human approval, code-review discipline, and a rebase private; merge shared history policy
• feature the manifesto in global navigation and on the homepage
• retain the exact CI-verified static artifact for review and publication
• add static contract validation and Playwright coverage across desktop, tablet, and mobile

Positioning

This is explicitly presented as an extension, not an official replacement for the Twelve-Factor App. The page links the original project, the current modernization repository, the ORESoftware SOPS standard, and primary standards or documentation for OCI, isolation, immutable infrastructure, connection lifecycle, Git policy, and code review.

Publication model

The initial publication is a one-time, explicit bootstrap from a merge commit carrying [bootstrap-22-factor]. The trusted post-merge job downloads the exact artifact produced after validation and browser tests, then commits only the generated Pages paths. It cannot run on pull-request code.

After bootstrap, ordinary branch and main pushes validate but do not publish. Subsequent releases publish only from an annotated site-v* tag on the current reviewed main commit, using the same artifact-promotion model.

Testing

• structured-data checks: exactly 22 factors, sequence I–XXII, 12 foundations, 10 extensions, unique anchors, and complete operating contracts
• Astro static build including /22-factor-app/index.html
• Playwright desktop, tablet, and mobile regression coverage
• overflow, navigation, accessibility, encrypted-configuration, Fiducia Cloud boundary, OCI, and Git-history assertions

[linear-code]

DEN-3872

[ORESoftware]

Publication evidence

The reviewed merge commit 97e49a32d001cbd87b9ba2cfb650c98d40d0f6a0 triggered the trusted one-time bootstrap. GitHub Actions committed the exact verified Pages snapshot as 03ebcd09674d07b93b04cfb71f103d8c96691774.

Live route: https://oresoftware.github.io/22-factor-app/

The separate hostname https://22-factor-apps.github.io/ still requires a GitHub user or organization named 22-factor-apps; the current ORESoftware account cannot claim another account's root github.io hostname.