feat: GitHub Pages site with landing page and live WASM demo (#33)

* feat: GitHub Pages site with landing page and live WASM demo

Dark terminal-aesthetic landing page showcasing all 8 skins, platform
targets, key features, architecture diagram, and build instructions.
Live demo page embeds the WASM backend with a skin selector dropdown.
CI workflow builds WASM and deploys via GitHub Pages on push to main.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: address AI review feedback (iteration 1)

Automated fix by Claude in response to Gemini/Codex review.

Iteration: 1/5

Co-Authored-By: AI Review Agent <noreply@anthropic.com>

* feat: integrate GitHub Pages deployment into main CI workflow

Move Pages build+deploy from standalone pages.yml into main-ci.yml as
a deploy-pages job that runs on the self-hosted runner after CI passes.
Only triggers on pushes to main. Deletes the standalone workflow since
the site folder can't auto-publish without the CI build step.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: add issues:write permission and clean stale _site artifacts

Explicit workflow-level permissions cause unspecified scopes to default
to none. The notify job's gh issue create needs issues:write. Also clear
_site before assembly to prevent stale files on the self-hosted runner.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: AI Agent Bot <ai-agent@localhost>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: AI Review Agent <ai-review-agent@localhost>

Author: 4 people

.github/workflows/main-ci.yml

@@ -14,6 +14,12 @@ on:
         type: boolean
         default: false
 
+permissions:
+  contents: write
+  issues: write
+  pages: write
+  id-token: write
+
 concurrency:
   group: main-ci-${{ github.sha }}
   cancel-in-progress: false
@@ -400,10 +406,54 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+  # -- Deploy GitHub Pages --------------------------------------------------
+  deploy-pages:
+    name: Deploy GitHub Pages
+    needs: ci
+    if: github.ref == 'refs/heads/main'
+    runs-on: self-hosted
+    timeout-minutes: 15
+    concurrency:
+      group: pages
+      cancel-in-progress: false
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install wasm-pack
+        run: |
+          if ! command -v wasm-pack &>/dev/null; then
+            curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh
+          fi
+
+      - name: Build WASM
+        run: ./scripts/build-wasm.sh --release
+
+      - name: Assemble site
+        run: |
+          rm -rf _site
+          mkdir -p _site/demo
+          rsync -a --exclude screenshots site/ _site/
+          cp -r screenshots/ _site/screenshots/
+          cp -r pkg/ _site/pkg/
+          cp www/index.js _site/demo/index.js
+
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: _site
+
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4
+
   # -- CI Summary ----------------------------------------------------------
   notify:
     name: CI Summary
-    needs: [ci, build-release-binaries, create-release]
+    needs: [ci, build-release-binaries, create-release, deploy-pages]
     if: always()
     runs-on: self-hosted
     steps:
@@ -419,6 +469,7 @@ jobs:
           echo "| CI | ${{ needs.ci.result }} |" >> $GITHUB_STEP_SUMMARY
           echo "| Build Binaries | ${{ needs.build-release-binaries.result }} |" >> $GITHUB_STEP_SUMMARY
           echo "| GitHub Release | ${{ needs.create-release.result }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| GitHub Pages | ${{ needs.deploy-pages.result }} |" >> $GITHUB_STEP_SUMMARY
 
           if [[ "${{ needs.ci.result }}" == "failure" ]]; then
             echo "" >> $GITHUB_STEP_SUMMARY