Import pelikhan/rig into githubnext/rig and harden JSON fallback parsing

[Copilot]

This replaces the placeholder scaffold in githubnext/rig with the current pelikhan/rig codebase so the repository contains the actual TypeScript package, skill implementation, samples, docs, and test suite. While validating the import, it also removes regex-based JSON fallback parsing that triggered CodeQL ReDoS findings.

• Repository import

  • Bring over the published rig package layout: runtime, addons, samples, scripts, docs, workflows, and package metadata
  • Replace the README-only placeholder state with the source project structure expected by the package

• Parser hardening

  • Replace regex-based fallback extraction for fenced JSON and embedded JSON objects in skills/rig/rig.ts
  • Use bounded, linear parsing helpers instead of backtracking patterns flagged by CodeQL

• Coverage

  • Add focused parser tests for:
    • JSON returned inside fenced markdown blocks
    • JSON objects embedded inside surrounding prose

mocks.setSendAndWaitImpl(async () => "```json\n\"hello\"\n```");

const reviewer = agent({ name: "reviewer" });

await expect(reviewer("go")).resolves.toBe("hello");

Original prompt

Clone the code from https://github.com/pelikhan/rig

[pelikhan]

@copilot restore license file

[Copilot]

Fixed in e68a89e.