soliplex-plumber v0.5: normal 'src/<package>' layouts

Bug fixes / refactoring

• Support more usual 'src/' layout [#28, PR #29]

  E.g.:

  src/
    <package_name>
      pyproject.toml
      src/
        <package_name>
          ...
      tests/
        unit/
          ...
  

  Warn about the legacy layout style.

• Remove deprecated posargs: 'rooms.install_room{,_from}' [#17, PR #21]

  Closes #17.

Documentation

• Add 'how-to' pages to supplement API reference [#18, PR #30]

CI / tests

• Use repo-slug as slack notify username [#26, PR #27]

• Split slack failure notification from main actions [#23, PR #25]

  Workflow actions which check out potentially-untrusted code (e.g.,
  from fork-generated PRs) must not have access to the 'SLACK_NOTIFY_URL'
  secret: therefore, delegate slack notification to a new action, triggered by
  'workflow' run and filtering on 'failure'. That workflow does not see
  untrusted code.

• Harden issue / PR slack notification [#22, PR #24]

  ... against hostile metadata (title w/ JSON injection).

• Submit PRs using 'pull_request_target' [PR #24]

  ... so that it runs with the org secret for slack notification.

• Move workflows to Node 24 actions [#19, PR #20]

  Bump JavaScript actions still on the deprecated Node 20 runtime to their
  Node 24-native versions ahead of the 2026-06-26 cutover:

  • actions/checkout@v4 -> @v6
  • astral-sh/setup-uv@v6 -> @v7
  • actions/upload-artifact@v4 -> @v6
  • slackapi/slack-github-action@v2.1.x -> @V3