refactor(repo): delete the hello seed package

[systemfsoftware-maker]

Lake 1, U9 — stacked on #42. Operator approval: Kiro, 2026-10-05 (release job shape: keep tags + GitHub Releases, drop npm).

• packages/starter/** deleted (R121). packages/* stays a workspace glob for adopters.
• README.md: the workspace tree and package list now name apps/site and apps/site-e2e; "Claim the Package" and the tsdown row are gone; the Changesets row no longer mentions npm OIDC.
• pnpm-workspace.yaml: rimraf and tsdown leave the catalog (no manifest uses them); lockfile regenerated.
• Release pipeline without npm:
  • release.yml: the publish · oidc · tag job becomes release · tag on small — capture, assert release notes, tag, GitHub Releases. No build, no id-token: write, no pnpm publish.
  • scripts/lib/cycle.ts: a version is owed when git tag --list <name>@v<version> is empty. isPublished/unpublishedOf are gone.
  • plan-release.ts: phase publish → release. tag-released-packages.ts: --publish/--unpublished removed.
  • No script's --allow-net names registry.npmjs.org. .changeset/README.md and the Release PR body describe tags + GitHub Releases.
• After this PR no workspace package is public, so the pipeline tags nothing until one exists. U11b replaces these scripts with a caller of pnpm-release-management's reusable release workflow.

QA

$ git grep -nI -e '@TODO/starter' -e 'packages/starter' -e 'hello.integration' -- . ':!*.lock' ':!docs/brainstorms' ':!docs/plans'
(exit 1)
$ git grep -nIE 'npmjs|OIDC|oidc|provenance|id-token|unpublished|--publish' -- . ':!*.lock' ':!docs/brainstorms' ':!docs/plans' ':!docs/solutions' ':!repos'
(exit 1)
# throwaway repo: one public package @x/a@1.0.0
--- untagged
plan-release: pending_intents=0 this_cycle=1 -> phase=release
would tag @x/a@v1.0.0
--- after `git tag @x/a@v1.0.0`
plan-release: pending_intents=0 this_cycle=0 -> phase=none
dry run: 0 tag(s)
# this repo
$ ./scripts/plan-release.ts
plan-release: pending_intents=0 this_cycle=0 -> phase=none
$ ./scripts/create-github-releases.ts --assert --captured empty.json   # no registry.npmjs.org permission
no this-cycle releases — empty captured set
$ nix develop --command actionlint .github/workflows/*.yml
actionlint=0
$ pnpm check:ci
check=0
$ pnpm journeys
journeys=0

Peer warnings (hono from @alchemy.run/frontend-frameworks, typescript from capnp-es) predate this PR: the same two appear at #42's head.

[kiro-systemf]

Conductor verdict: 8/8 green on 91b3707, tree == reviewed 380bde4, 0 threads, hunt clean.