Publish workflow catalog to LibreCodeCoop/.github and validate first consumer #7

Goal

Complete the developer-facing distribution path from LibreCodeCoop/github-workflows to the organization catalog and real consumers.

Completed path

• import Nextcloud templates from immutable upstream commits;
• verify SHA-256 and retain vendored upstream sources;
• keep LibreCode adaptations as explicit patches;
• generate workflow-templates/*.yml and metadata;
• publish the catalog through reviewable PRs to LibreCodeCoop/.github;
• verify the required workflow + .properties.json catalog pair through the GitHub API;
• install and execute templates in real consumers;
• automate subsequent consumer updates through reviewable PRs;
• validate local divergence protection and recovery in profile_fields;
• cover broken consumer patch handling and draft signaling in the tested sync Action;
• migrate consumer synchronization to the consumer-local sync-workflow-templates.yml + actions/sync-workflows model.

The earlier manual “visually confirm the card” checkbox is no longer treated as a blocking acceptance criterion: the GitHub-native catalog files and metadata are published in the required location, and the same catalog has been consumed successfully by production repositories.

The original central consumer registry architecture was subsequently removed after Extract, LibreSign and Profile Fields moved to consumer-local synchronization.