Installer UX

• macOS: Terminal-based setup with visible progress, branded DMG
• All platforms: skip onboard for portal wizard, gateway.auth.mode=none
• Agent onboarding: user names their agent (default: Atlas)

Security

• Resolve all 21 Dependabot vulnerabilities (undici, fast-xml-parser, path-to-regexp, picomatch, music-metadata, yaml, brace-expansion)

CI/DX

• Fix CI workflow (secrets in if conditions)
• PR Review uses Anthropic API directly, graceful skip without API key
• Fix all 129 TypeScript type errors
• Fix docs broken links, markdown lint, formatting
• Bump test timeout to 30min, cap CI workers to 2