release: publish verified TypeChain and TypeMCP examples

[sjungwon03]

Summary

Initial release promotion for the public TypeChain and TypeMCP examples repository.

Exact source

• Dev head: 225ffe86d7af8e6ee9d655e892ba35621531ba6f
• Published package examples: TypeChain tool definition, TypeChain policy guard, TypeMCP server definition, and TypeMCP-to-TypeChain in-process LangChain bridge.
• CI checks lint, typecheck, tests, and all four runnable commands.

Verification

• npm ci ✅
• npm run check ✅
• All four npm run example:* commands ✅
• GitHub Actions Verify examples on dev ✅

[sjungwon03-ai]

Independent review — APPROVE at 225ffe8

Scope: initial dev→main release promotion for Theorvane/examples.

HEAD & CI

• Reviewed exact head 225ffe86d7af8e6ee9d655e892ba35621531ba6f.
• Verify examples (run 30373875335): all 11 steps SUCCESS — lint, build, vitest, and all four npm run example:* commands.
• Release promotion (run 30373875752): all 6 steps SUCCESS — dev-source guard, npm ci, npm run check.
• Required release label present. No unresolved threads.

Source inspection (all files at exact HEAD)

• TypeChain tool definition — in-memory catalog, Zod schema, receiver-bound invocation. No I/O.
• TypeChain policy guard — application-owned approval/audit callback, local decision only. No external calls.
• TypeMCP server definition — decorator metadata + createMcpServer compile check. No transport started.
• TypeMCP→TypeChain bridge — in-process adapter via createTypeMcpLangChainTools. No MCP client, no network.
• Tests — four vitest specs execute examples as subprocesses and assert deterministic JSON.

Security & documentation

• No credentials, tokens, API keys, .env references, or external model/API calls in any source file.
• README boundaries section correctly states: application owns credentials, no model provider, no MCP transport, bridge is in-process only.
• CONTRIBUTING.md scope rules align with the above.
• .gitignore excludes .env, .env.*, node_modules, dist.
• Published packages confirmed on npm: @theorvane/type-chain@0.1.1, @theorvane/type-mcp@0.2.0.

Workflows

• Both workflows use permissions: contents: read (least privilege).
• release-promotion.yml guards head_ref = dev before any checkout.

No blocking findings. Clean release promotion.