Moves all automated scripts back to the repo root where setup.sh
expects them. standalone/ remains for manual-run tools.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Moves automated scan scripts and setup.sh into package/.
bind-ssh-tailscale.sh remains in standalone/ as a manual-run tool.
Updates README.md setup instructions to reflect new paths.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- setup.sh: run once after cloning to configure credentials and register cron jobs
- config.sh gitignored so credentials never enter the repo
- Both scripts notify Telegram on issues/warnings, including hostname
- Cron runs npm-security-check at 08:00 and check-nextjs-rce at 08:05 daily
