Scaffold GitManager multi-repo dashboard

Runnable skeleton per AGENT.md: Echo server (/, /help, /healthz, /api/repos), read-only repo scanner with in-memory index, the internal/git boundary, the <repo-list> web component with design tokens, and dev tooling (Dockerfile, docker-compose, air, .env.example).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.env.example

@@ -0,0 +1,45 @@
+# ---------------------------------------------------------------------------
+# GitManager configuration. Copy this file to `.env` and fill in values.
+# NEVER commit a real `.env` (it is git-ignored). See AGENT.md §1.5.
+# ---------------------------------------------------------------------------
+
+# Address the HTTP server binds to. Localhost-only by default: there is NO
+# authentication (AGENT.md §0). Only bind to a non-local interface deliberately.
+LISTEN_ADDR=127.0.0.1:8080
+
+# Roots to scan for Git repositories, comma-separated (absolute paths).
+# Inside Docker these must be the *container* paths that the host roots are
+# mounted to (see docker-compose.yml). Example: /repos,/work/other
+GIT_REPO_ROOTS=/repos
+
+# Path to the git binary. "git" resolves it from PATH (git is installed in the
+# container image).
+GIT_BIN=git
+
+# --- Repo scanner (read-only; AGENT.md §5) ---------------------------------
+
+# How often the background scanner refreshes repo state.
+SCAN_INTERVAL=30s
+
+# Max directory depth to descend under each root when discovering repos.
+SCAN_MAX_DEPTH=4
+
+# Directory names to skip during discovery, comma-separated.
+SCAN_IGNORE=node_modules,vendor,.cache
+
+# Allow the scanner to run `git fetch` (network) to keep ahead/behind counts
+# current. OFF by default — no unsolicited network. (AGENT.md §5)
+SCAN_FETCH_ENABLED=false
+
+# --- Logging (AGENT.md §7) --------------------------------------------------
+
+# "dev" uses a readable console handler; anything else uses structured JSON.
+APP_ENV=dev
+
+# Optional: also append structured logs to this file. Leave empty to disable.
+LOG_FILE=
+
+# --- Forge integration — OPTIONAL, read-only, token-gated (AGENT.md §8) -----
+# With no token the feature is simply absent; the rest of the app is unaffected.
+GITHUB_TOKEN=
+GITLAB_TOKEN=