Generalize Markdown Task Manager as Research Workbench

[sfuchs-de]

Summary

• rename and generalize the public application as Research Workbench while preserving the markdown-task-manager repository name
• make vault configuration, module labels, ownership aliases, and domain classification metadata-driven
• add the full synthetic starter vault, CLI/bootstrap/doctor workflow, deterministic static rendering, and all generalized modules
• add local and hardened Docker/private-hosting distribution, documentation, governance, screenshots, and privacy safeguards
• keep GitHub synchronization disabled by default and dry-run-first

Privacy boundary

• all examples and screenshots use fictional data
• no private vault, private repository history, personal project data, correspondence, calendars, or binary documents are included
• the scanner checks the working tree and complete public Git history against secret, path, email-domain, binary-document, and private-denylist rules

Verification

• Python: 138 passed
• frontend: 168 passed
• Playwright: 5 passed against complete synthetic and empty vaults
• deterministic render, schema, link, privacy/full-history, and git diff --check checks pass
• pip audit: no known vulnerabilities
• npm audit: 0 vulnerabilities
• Docker build/smoke runs in CI (local Docker daemon was unavailable)

This is the proposed v1.1.0 release; the repository already has a historical v1.0.0 tag.