Rebrand to Proof of Work; multi-user 0.4 package with curated library sync

Repo cleanup
- Add top-level .gitignore (was missing; node_modules, .next, *.s9pk,
  image.tar, seed/data/*.db, log files, etc.) and a root README.
- Delete legacy start9/0.3.5/ package (StartOS 0.3.5 wrapper, no longer
  the deploy target).
- Delete start9-example-packaging/ (template from another project).
- Delete planning docs (START9_PACKAGING_LOG.md, VERSIONING.md,
  STARTOS_0.4_UPGRADE_PROMPT.md, ICON_FILES_INDEX.md, etc.) — info now
  lives in the deploy guide and code comments.
- Drop the standalone Dockerfile, docker-compose.yml, ICON_*, and dev
  log/build artifacts from the app dir.
- Drop the v0.1.0:18/19/20 version files (they belonged to the legacy
  workout-log package and don't apply to the new id).

Rename + new package
- Rename app dir workout-planner/ -> proof-of-work/.
- Rename StartOS package id workout-log -> proof-of-work; the new id
  makes this a brand new StartOS service (clean cutover from the old
  one rather than in-place upgrade).
- Reset version graph; v1.0.0:1 is the seeded cutover release. The
  Dockerfile bakes a one-time /data snapshot and docker_entrypoint.sh
  copies it into the new volume on truly-fresh first boot only (both
  /data/app.db missing AND /data/.seeded absent).
- Move start9/0.4-migration/ -> start9/0.4/; the old start9/0.4/ stub
  is gone.

Curated exercise library (multi-user-aware)
- proof-of-work/prisma/exercises.seed.json is the canonical library
  shipped to every install (164 exercises today, dumped from the live
  snapshot).
- proof-of-work/scripts/sync-library.cjs (npm run sync-library) refreshes
  the JSON from start9/0.4/seed/data/app.db after refresh_seed.sh.
- proof-of-work/prisma/seed.ts now reads from the JSON instead of a
  hardcoded 52-exercise array; runs at Docker build time to seed the
  fallback DB and on first boot for fresh installs.
- proof-of-work/prisma/ensureExerciseLibrary.cjs runs on every container
  boot (from docker_entrypoint.sh) and INSERT OR IGNOREs every library
  entry for every user, keyed on (userId, name). Library updates flow
  to existing installs on package upgrade; user-custom exercises
  (isCustom=true) and any colliding names are never overwritten;
  removed exercises stay on existing installs (additive-only).

Deploy guide (start9/0.4/DEPLOY_040.md)
- Rewritten end-to-end for the workout-log -> proof-of-work cutover:
  refresh_seed, sync-library, build, sideload, verify, rotate creds,
  stop the old service, then post-cutover cleanup release v1.0.0:2.

start9/0.4/refresh_seed.sh

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+# Refresh seed/data/ from the live StartOS 0.3.5 host over SSH.
+#
+# Usage:
+#   ./start9/0.4/refresh_seed.sh <ssh-target> [remote-volume-path]
+#
+# Example (most common):
+#   ./start9/0.4/refresh_seed.sh embassy@embassy.local
+#
+# Example (custom remote path):
+#   ./start9/0.4/refresh_seed.sh embassy@embassy.local \
+#       /embassy-data/package-data/volumes/proof-of-work/data/main
+#
+# Behavior:
+#   - Auto-detects /embassy-data/package-data/volumes/proof-of-work/data/main
+#     if the remote path is omitted.
+#   - Refuses to overwrite a non-empty seed/data/ without confirmation.
+#   - After SCP, runs PRAGMA integrity_check and prints expected row counts.
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+SEED_DATA_DIR="${SCRIPT_DIR}/seed/data"
+
+if [ "$#" -lt 1 ]; then
+  echo "usage: $0 <ssh-target> [remote-volume-path]" >&2
+  exit 64
+fi
+
+SSH_TARGET="$1"
+REMOTE_PATH="${2:-/embassy-data/package-data/volumes/proof-of-work/data/main}"
+
+echo "[refresh-seed] target:       ${SSH_TARGET}"
+echo "[refresh-seed] remote path:  ${REMOTE_PATH}"
+echo "[refresh-seed] local seed:   ${SEED_DATA_DIR}"
+
+mkdir -p "${SEED_DATA_DIR}"
+
+# Prompt if seed/data/ already has files.
+if [ -n "$(ls -A "${SEED_DATA_DIR}" 2>/dev/null || true)" ]; then
+  echo
+  echo "[refresh-seed] WARNING: ${SEED_DATA_DIR} is non-empty:" >&2
+  ls -la "${SEED_DATA_DIR}" >&2
+  echo
+  read -r -p "Overwrite existing seed? [y/N] " answer
+  case "${answer:-N}" in
+    y|Y|yes|YES) ;;
+    *) echo "[refresh-seed] aborted."; exit 1 ;;
+  esac
+fi
+
+# Verify the remote path exists before copying.
+echo "[refresh-seed] verifying remote path exists..."
+if ! ssh "${SSH_TARGET}" "test -d \"${REMOTE_PATH}\""; then
+  echo "[refresh-seed] remote path not found on ${SSH_TARGET}:${REMOTE_PATH}" >&2
+  exit 1
+fi
+
+# Copy everything under the volume root (preserves mode/time).
+echo "[refresh-seed] copying volume contents via rsync..."
+rsync -aP --delete-excluded --exclude='.seeded' \
+  "${SSH_TARGET}:${REMOTE_PATH}/" \
+  "${SEED_DATA_DIR}/"
+
+# Integrity check on the primary SQLite file, if present.
+DB_PATH="${SEED_DATA_DIR}/app.db"
+if [ -f "${DB_PATH}" ]; then
+  echo
+  echo "[refresh-seed] sqlite integrity_check:"
+  sqlite3 "${DB_PATH}" "PRAGMA integrity_check;" || {
+    echo "[refresh-seed] WARNING: integrity_check failed" >&2
+  }
+  echo
+  echo "[refresh-seed] row counts:"
+  for t in User Workout Exercise SetLog UserPreferences Program Session; do
+    n="$(sqlite3 "${DB_PATH}" "SELECT COUNT(*) FROM \"${t}\";" 2>/dev/null || echo '-')"
+    printf '  %-18s %s\n' "${t}" "${n}"
+  done
+else
+  echo "[refresh-seed] NOTE: no app.db present in remote snapshot \u2014 skipped integrity check." >&2
+fi
+
+echo
+echo "[refresh-seed] done. Review ${SEED_DATA_DIR}, commit the snapshot, and rebuild:"
+echo "  cd start9/0.4 && make clean && make"