Merge feature/enhance-work-item-context-menu into demo

Combines UI enhancements from feature branch with demo mode infrastructure:
- Enhanced work item context menus and editing
- Preserved demo mode features (DemoBanner, auto guest login)
- Added /workspace route and wildcard routing
- Fixed git hooks to correctly block co-author attribution

Key changes:
- Merged UI improvements from feature branch
- Kept demo infrastructure (auth, deployment configs)
- Fixed commit-msg hook error message (now says "blocked" not "must include")
- Applied co-author blocking hook to all GraphDone repositories

Author: Matthew Valancy

.env.vm.example

@@ -0,0 +1,51 @@
+# GraphDone VM Environment Variables
+# Copy this file to .env.vm and fill in your values
+# These variables can be used to configure VM launches
+
+# Tailscale Configuration
+# Get your auth key from: https://login.tailscale.com/admin/settings/keys
+# IMPORTANT: Use ephemeral keys for security
+TAILSCALE_AUTH_KEY=
+
+# VM Resource Overrides
+# These override values in vm.config.yml
+# VM_CPUS=4
+# VM_MEMORY=8G
+# VM_DISK=30G
+
+# Git Configuration
+# VM_BRANCH=main
+# VM_REPO_URL=https://github.com/GraphDone/GraphDone-Core.git
+
+# VM Name Override
+# VM_NAME=graphdone-dev
+
+# Docker Registry (for private images)
+# DOCKER_REGISTRY_URL=
+# DOCKER_REGISTRY_USER=
+# DOCKER_REGISTRY_PASSWORD=
+
+# Neo4j Configuration (if different from defaults)
+# NEO4J_PASSWORD=graphdone_password
+# NEO4J_USER=neo4j
+
+# Development Settings
+# NODE_ENV=development
+# DEBUG=graphdone:*
+
+# Network Configuration
+# VM_BRIDGE_INTERFACE=eth0
+# VM_USE_BRIDGE=false
+
+# Startup Configuration
+# VM_AUTO_SETUP=true
+# VM_AUTO_SEED=true
+# VM_RUN_ON_BOOT=true
+
+# Additional Mounts (comma-separated host:vm pairs)
+# VM_MOUNTS=~/data:/home/ubuntu/data,~/projects:/home/ubuntu/projects
+
+# Cloud Provider Settings (for cloud VMs)
+# CLOUD_PROVIDER=aws
+# CLOUD_REGION=us-west-2
+# CLOUD_INSTANCE_TYPE=t3.xlarge

.githooks/commit-msg

@@ -0,0 +1,19 @@
+#!/bin/sh
+# Commit-msg hook - blocks co-author attribution
+# Ensures all commits are single-authored
+
+COMMIT_MSG_FILE=$1
+COMMIT_MSG=$(cat "$COMMIT_MSG_FILE")
+
+# Check for co-author patterns (case insensitive)
+if echo "$COMMIT_MSG" | grep -iq "co-authored-by:"; then
+  echo "❌ ERROR: Co-author attribution detected and blocked"
+  echo ""
+  echo "This repository does not permit co-authored commits."
+  echo "Please remove any 'Co-Authored-By:' lines from your commit message."
+  echo ""
+  exit 1
+fi
+
+# Allow commit if no co-author lines found
+exit 0

.githooks/pre-commit

@@ -0,0 +1,80 @@
+#!/bin/sh
+# Pre-commit hook to block Co-Authored-By lines
+# GraphDone does not use pair programming and maintains clean git logs
+
+# Get the commit message file path
+COMMIT_MSG_FILE="$1"
+
+# Check if we're in the middle of a commit (not a merge/rebase)
+if git rev-parse --verify HEAD >/dev/null 2>&1; then
+    # Get the staged commit message from git
+    COMMIT_MSG=$(git diff --cached --diff-filter=A -z --name-only | xargs -0 cat 2>/dev/null | grep -i "co-authored-by:" || true)
+    
+    # If no staged message, check for message passed via -m flag
+    if [ -z "$COMMIT_MSG" ] && [ -n "$GIT_EDITOR" ]; then
+        COMMIT_MSG=$(echo "$GIT_EDITOR" | grep -i "co-authored-by:" || true)
+    fi
+    
+    # Check the commit message template if it exists
+    if [ -z "$COMMIT_MSG" ] && [ -f ".gitmessage" ]; then
+        COMMIT_MSG=$(grep -i "co-authored-by:" .gitmessage 2>/dev/null || true)
+    fi
+    
+    # For checking the actual commit message being prepared
+    # This catches -m flag commits and editor commits
+    if git diff --cached --quiet; then
+        # No staged changes, skip
+        exit 0
+    fi
+fi
+
+# Function to check commit message
+check_commit_message() {
+    # Check for Co-Authored-By in various formats
+    if echo "$1" | grep -iE "(co-authored-by:|co-author:|coauthor:|pair[- ]programm)" >/dev/null 2>&1; then
+        echo ""
+        echo "❌ ERROR: Commit blocked - Co-Authored-By detected"
+        echo ""
+        echo "GraphDone maintains individual attribution in git logs."
+        echo "Please remove any of the following from your commit message:"
+        echo "  • Co-Authored-By: ..."
+        echo "  • Co-Author: ..."
+        echo "  • References to pair programming"
+        echo ""
+        echo "Each commit should have a single author for clear accountability."
+        echo ""
+        return 1
+    fi
+    return 0
+}
+
+# Main pre-commit check
+# This will be called during the actual commit process
+# The commit message will be checked in the commit-msg hook
+# Here we just set up the environment
+
+# Check if there are any Co-Authored-By lines in staged files' content
+# (in case someone accidentally committed a file with Co-Authored-By in it)
+STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
+if [ -n "$STAGED_FILES" ]; then
+    for FILE in $STAGED_FILES; do
+        # Skip binary files and this hook file itself
+        if [ "$FILE" = ".githooks/pre-commit" ] || [ "$FILE" = ".githooks/commit-msg" ]; then
+            continue
+        fi
+        
+        # Only check text files for accidental Co-Authored-By content
+        if file --mime "$FILE" 2>/dev/null | grep -q "text/"; then
+            if git show ":$FILE" 2>/dev/null | grep -iE "^[^#]*co-authored-by:" >/dev/null 2>&1; then
+                echo ""
+                echo "⚠️  WARNING: File '$FILE' contains 'Co-Authored-By' text"
+                echo "   This may be intentional (documentation, etc.) but please verify."
+                echo ""
+                # Don't block, just warn for file content
+            fi
+        fi
+    done
+fi
+
+# Pre-commit passes, actual message check happens in commit-msg hook
+exit 0