feat(web): AEO foundation — robots, JSON-LD, meta, llms.txt, security headers

Implements the high-signal, content-independent fixes flagged across the
multi-engine AEO audit:

- robots.txt (app/robots.ts): allow mainstream + AI crawlers (GPTBot,
  ClaudeBot, PerplexityBot, Google-Extended, …), disallow /api, link sitemap.
- Organization + WebSite JSON-LD on the root layout; BlogPosting JSON-LD on
  /blog/[slug].
- Richer metadata: descriptive default title, Open Graph + Twitter cards,
  canonical, icons, metadataBase.
- Per-route titles/descriptions for catch-all routes (docs, about, hire-us,
  agent-swarm, …) instead of the generic "LogicSRC".
- /llms.txt (llmstxt.org) and /skill.md capability manifest.
- /.well-known/security.txt (RFC 9116).
- Security headers via next.config: HSTS, X-Content-Type-Options,
  X-Frame-Options, Referrer-Policy, Permissions-Policy (CSP intentionally
  deferred to avoid breaking inline/stats/CoinPay scripts).

Verified in a running build: all routes serve correctly and headers are set.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/logicsrc-web/src/app/skill.md/route.ts

@@ -0,0 +1,42 @@
+const SITE_URL = (process.env.PUBLIC_URL ?? "https://logicsrc.com").replace(/\/$/, "");
+
+// GET /skill.md — capability manifest for agents discovering what this site
+// exposes.
+export function GET(): Response {
+  const body = `# LogicSRC Skill
+
+LogicSRC publishes open coordination standards (schemas, primitives, and
+conventions) for humans, AI agents, plugins, payment systems, and hosted
+products. CommandBoard.run is the reference implementation.
+
+Base URL: ${SITE_URL}
+
+## Resources
+
+- Specification & docs: ${SITE_URL}/docs
+- OpenSpec comparison: ${SITE_URL}/openspec
+- Schemas, CLI, SDK, TUI, and reference implementations: ${SITE_URL}/
+- Blog feed: ${SITE_URL}/blog/rss.xml
+- Sitemap: ${SITE_URL}/sitemap.xml
+- LLM orientation: ${SITE_URL}/llms.txt
+
+## What you can do here
+
+- Read the LogicSRC coordination schemas and conventions.
+- Compare LogicSRC with OpenSpec.dev.
+- Request paid implementation help via the Hire Us flow (${SITE_URL}/hire-us),
+  billed at $250/week for accepted work and paid through CoinPay.
+
+## Notes
+
+- Public marketing/spec content is open to crawl. The /api/ surface is for
+  application use, not crawling.
+- Contact: implementation requests via the Hire Us form at ${SITE_URL}/hire-us.
+`;
+  return new Response(body, {
+    headers: {
+      "content-type": "text/markdown; charset=utf-8",
+      "cache-control": "public, max-age=3600",
+    },
+  });
+}