feat(browse): snapshot usernames like domains and autocomplete the Following search

[BigTava]

Summary

• Mirror the domain-snapshot pipeline for usernames with a shared publish library, a People-chain crawler, and a daily workflow that publishes 2-char-prefix shards to Bulletin.
• Add prefix autocomplete to the Following search, reading the verifiable username snapshot only through the host preimage bridge.
• Wire the username snapshot CID through config, build, and deploy the same way as the domain snapshot.
• Fold the autocomplete assertion into the existing Following e2e spec and unify the suite under one describe.

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 3 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/snapshot-usernames.yml

Package	Version	License	Issue Type
actions/cache/save	4.*.*	Null	Unknown License
actions/checkout	4.*.*	Null	Unknown License
oven-sh/setup-bun	2.*.*	Null	Unknown License

Denied Licenses:

GPL-3.0, AGPL-3.0

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/cache/save	4.*.*	🟢 6.4	Details Check Score Reason Maintained 🟢 10 12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 10 all changesets reviewed CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 3 dependency not pinned by hash detected -- score normalized to 3 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected SAST 🟢 10 SAST tool is run on all commits Branch-Protection ⚠️ 1 branch protection is not maximal on development and all release branches
actions/actions/checkout	4.*.*	🟢 7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 20 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Pinned-Dependencies 🟢 3 dependency not pinned by hash detected -- score normalized to 3 Packaging ⚠️ -1 packaging workflow not detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected SAST 🟢 10 SAST tool is run on all commits Branch-Protection 🟢 6 branch protection is not maximal on development and all release branches
actions/oven-sh/setup-bun	2.*.*	Unknown	Unknown

Scanned Files

• .github/workflows/snapshot-usernames.yml

[github-actions]

Bundle Size

App

File	Raw	Gzip
descriptors-2G6BRBSD-C5FPr52L.js	5.5 KB	1.1 KB
descriptors-DjBWqSXc-C3cU6oXE.js	75.7 KB	22.6 KB
index-DLcO0EkZ.js	7.5 KB	2.8 KB
main-DBN8VFn6.js	511.0 KB	160.5 KB
metadataTypes-25QE37UU-TmJElKgL.js	26.4 KB	10.1 KB
metadataTypes-BVHjNEoi-vYLD7OAJ.js	197.6 KB	71.0 KB
pasAh_metadata-GV7RKNKI-DpF7XMME.js	767.6 KB	242.9 KB
paseopeople_metadata-DI0S6WN1-ohoPX_Nh.js	533.3 KB	177.2 KB
passet_metadata-7H7LGTAU-BnXlGKH_.js	523.0 KB	158.4 KB
previewnetpeople_metadata-DggKPANl-CE_8Em8D.js	533.3 KB	177.2 KB
wndAh_metadata-OOYY4CUT-0VBjkuwz.js	741.8 KB	233.2 KB
main-DgrmNKHD.css	60.6 KB	16.2 KB

App total: 3983.7 KB raw / 1273.7 KB gzip

Widget

File	Raw	Gzip
descriptors-2G6BRBSD-C5FPr52L.js	5.5 KB	1.1 KB
descriptors-DjBWqSXc-C3cU6oXE.js	75.7 KB	22.6 KB
index-CNRc1Tsm.js	7.5 KB	2.8 KB
metadataTypes-25QE37UU-TmJElKgL.js	26.4 KB	10.1 KB
metadataTypes-BVHjNEoi-vYLD7OAJ.js	197.6 KB	71.0 KB
pasAh_metadata-GV7RKNKI-DpF7XMME.js	767.6 KB	242.9 KB
paseopeople_metadata-DI0S6WN1-ohoPX_Nh.js	533.3 KB	177.2 KB
passet_metadata-7H7LGTAU-BnXlGKH_.js	523.0 KB	158.4 KB
previewnetpeople_metadata-DggKPANl-CE_8Em8D.js	533.3 KB	177.2 KB
widget-CYTowBMO.js	428.8 KB	135.7 KB
wndAh_metadata-OOYY4CUT-0VBjkuwz.js	741.8 KB	233.2 KB
widget-DC7qry4p.css	43.1 KB	13.4 KB

Widget total: 3884.1 KB raw / 1246.1 KB gzip

• App: -.1 KB gzip vs main
• Widget: no change vs main

[github-actions]

browse-worktree-username-snapshot00.dot · logs

https://browse-worktree-username-snapshot00.paseo.li

[github-actions]

browse-worktree-username-snapshot00.dot · logs

https://browse-worktree-username-snapshot00.paseo.li