v0.1.1: Granola meeting import

Adds Granola as an import source. People who attended your meetings become contacts (source granola) with the last-met date and meeting title kept on their profile, merged through the same dedupe path as the CSV sources.

• Server-side key in GRANOLA_API_KEY (Granola Business plan). The browser never sees it.
• POST /api/import/granola behind the allow-list. CLI: import --granola with --dry-run, --since, --exclude-domain, --self.
• Migration 20261012000300_granola_source.sql adds the source to the imports check (nothing dropped).
• Demo mode shows the source with invented meetings.
• New skill: skills/looot-meeting-prep/.

Not tested against a live Granola account. The sample list response and the Retry-After header on a 429 were guessed from the docs; all HTTP in the tests is mocked.

v0.1.0

First release. Search your own network in plain language.

• Import LinkedIn Connections.csv, Google Contacts CSV, X following.js and any CSV (column mapping step). Dedupe by email, LinkedIn URL, or name plus company.
• Supabase schema with row-level security, full-text search, pg_trgm fuzzy match, rule-based query parser (no model).
• Sidebar app: People, Search, Companies, Imports, Enrich, Settings. Demo on 200 invented people: npm run demo.
• Headless CLI with --dry-run. Optional paid enrichment through looot, quote first, per-run cap, daily and monthly budget, idempotency keys, pending runs held.
• Sign-in allow-list, same-origin and JSON checks, security headers.

Not run: any paid looot call, and the Supabase client against a live project. See the README Status section.