Switch runtime from Bun to Node + tsx; swap bun:sqlite → better-sqlite3

Vercel's serverless functions run on Node, so `bun:sqlite` imports in
lib/db.ts blocked deployment. Moves the codebase onto Node ≥20.9.0 as
the runtime of record while keeping Bun available locally as a fast
package manager (`bun install`, `bun run <script>`).

Runtime + deps:
- lib/db.ts now uses better-sqlite3 (12.9.0, pinned). Schema + prepared
  statements unchanged; only the import and construction differ.
- package.json scripts invoke tsx directly (dev/build/start via next,
  score/seed/init-db via tsx). Added tsx@4.21.0 + @types/better-sqlite3.

Scorer:
- Normalise matchedPath to repo-relative via new toRelative() in
  scoring/scorer.ts so persisted/rendered paths never leak the
  scanner's absolute FS layout.

Seeds:
- Add two entries to scripts/seed.ts (openclaw, TwoFac) — 28 total.
- seed.ts now calls `bun run score` rather than invoking the script
  file directly, so the script path lives in one place (package.json).

Docs sync (same PR per CONTRIBUTING.md):
- AGENTS.md Stack + Run-anything + Layout updated for Node/tsx/
  better-sqlite3 + 28 seeds. README Stack-rationale table, Quickstart,
  and Layout mirror the same. CONTRIBUTING's Getting-started count
  bumped. tasks/0.1.0/03-ci.md and tasks/0.2.0/01-tests.md switched to
  `node --test`. tasks/0.2.0/02-self-score.md reflects self-seed.

Contributor docs:
- Add .github/PULL_REQUEST_TEMPLATE.md mirroring CONTRIBUTING's PR
  description spec so new PRs auto-populate.

Cleanup:
- Trim comments that restated the code or documented stdlib behaviour
  (Intl.NumberFormat, field-name JSDoc, a formula comment that
  duplicated its own implementation). Kept WHY comments — shallow-clone
  rationale, toRelative privacy note, SQL-whitelist invariant, the
  changelog discipline, and the pass: number; // 0..1 range constraint.

Build artifact:
- .gitignore permits committing data/rank.db; DB file included here as
  a seeded snapshot. WAL/SHM sidecars also present from local WAL-mode
  runtime.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hsnice16

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,34 @@
+<!-- Replace the italic hints below with your content. See CONTRIBUTING.md for the full rules. -->
+
+## Summary
+
+_1–3 bullets. What changed, in product/capability terms — not a log of work done._
+
+## Motivation
+
+_Why this change. Link to the roadmap item or `tasks/<file>.md`. If it's a roadmap item, quote the task's Goal line._
+
+## Changes
+
+_Bulleted list of what this PR modifies. Keep it scoped to the summary._
+
+## Testing
+
+_How you verified this. Commands run (`bun run score <url>`, `bun x tsc --noEmit`, manual pass of specific pages). For UI changes: mobile + desktop, light + dark._
+
+## Screenshots / screencasts
+
+_Required for any UI change. Drag-and-drop into this description._
+
+## Docs + roadmap sync
+
+_Confirm one of:_
+
+- _"Ships a roadmap item — removed from `lib/roadmap.ts`, added to `lib/changelog.ts` under the current release bucket."_
+- _"N/A — internal refactor / polish; no changelog entry."_
+
+_Plus: "AGENTS.md / README.md updated if structure or conventions changed."_
+
+## Risks / rollback
+
+_What could break? How do we roll back? Leave blank if genuinely trivial._

.gitignore

@@ -1,7 +1,8 @@
 node_modules/
 .next/
-data/*.db
 data/*.db-journal
+data/*.db-wal
+data/*.db-shm
 tmp-clones/
 .env
 .env.local

AGENTS.md

@@ -16,11 +16,11 @@ See `README.md` for the full product narrative. See `tasks/` for per-version wor
 
 - **Next.js 16** (App Router) — web UI + API routes.
 - **React 19** — server components by default; no client JS unless interactivity requires it.
-- **Bun** runtime — native TS for scripts; Next.js itself runs via `bun --bun next dev`.
+- **Node (≥20.9.0)** — runtime for Next.js and CLI scripts (via `tsx`). Matches Vercel's serverless runtime. Bun is supported as a faster local package manager (`bun install`) but not required.
 - **TypeScript** — strict mode.
 - **Tailwind CSS 4** — `@theme` tokens in `app/globals.css`; no `tailwind.config.*` file.
 - **Phosphor Icons** (`@phosphor-icons/react`) — the only icon library. The `code-review` skill blocks non-Phosphor icons.
-- **`bun:sqlite`** — built-in SQLite driver, single file at `data/rank.db`.
+- **`better-sqlite3`** — Node-native SQLite driver, single file at `data/rank.db`. Swapped back from `bun:sqlite` because Vercel's serverless functions run on Node.
 - **`git` CLI** — shallow clones (`--depth 1 --single-branch`) via `node:child_process`.
 
 ## Run anything
@@ -29,7 +29,7 @@ See `README.md` for the full product narrative. See `tasks/` for per-version wor
 bun install
 bun run prepare-hooks  # once — installs lefthook git hooks (Biome + tsc on pre-commit)
 bun run init-db        # optional — auto-runs on first score
-bun run seed           # score the curated set (~27 repos) across GH / GL / BB
+bun run seed           # score the curated set (~28 repos) across GH / GL / BB
 bun run dev            # http://localhost:3000
 bun run score <url>    # score a single repo
 ```
@@ -69,7 +69,7 @@ lib/
     scorer.ts             # signals × weights, topImprovements
   clients/
     git.ts, github.ts
-  db.ts                   # bun:sqlite schema + queries
+  db.ts                   # better-sqlite3 schema + queries
   version.ts              # APP_NAME, APP_VERSION, IS_PRE_RELEASE, APP_URL, APP_DESCRIPTION, REPO_URL
   changelog.ts            # typed ChangelogEntry[]
   roadmap.ts              # typed RoadmapVersion[]

CONTRIBUTING.md

@@ -9,7 +9,7 @@ Read [AGENTS.md](./AGENTS.md) first — it's the source of truth for stack, conv
 ```bash
 bun install
 bun run prepare-hooks   # once — installs lefthook pre-commit (Biome + tsc)
-bun run seed            # optional: populate the DB with the curated set (~27 public repos)
+bun run seed            # optional: populate the DB with the curated set (~28 public repos)
 bun run dev             # http://localhost:3000
 ```
 
@@ -53,7 +53,7 @@ Open against `main`. Keep the branch rebased; avoid merge commits from `main` in
 
 ### PR description — required sections
 
-Every PR description must include:
+New PRs auto-populate from [`.github/PULL_REQUEST_TEMPLATE.md`](./.github/PULL_REQUEST_TEMPLATE.md). The template mirrors the sections below; keep the two in sync when either changes. Every PR description must include:
 
 ```markdown
 ## Summary

README.md

@@ -3,11 +3,11 @@
 [![Release](https://img.shields.io/badge/release-0.1.0-blue?style=flat-square)](./lib/changelog.ts)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green?style=flat-square)](./LICENSE)
 [![Next.js 16](https://img.shields.io/badge/Next.js-16-black?style=flat-square)](https://nextjs.org)
-[![Bun](https://img.shields.io/badge/runtime-Bun-%23000?style=flat-square)](https://bun.sh)
+[![Node ≥20.9](https://img.shields.io/badge/node-%E2%89%A520.9-43853d?style=flat-square&logo=node.js&logoColor=white)](https://nodejs.org)
 
 **A public dashboard that ranks open-source repos by how friendly they are for AI coding agents — per model.**
 
-Next.js 16 + Bun + SQLite, styled with Tailwind CSS 4. Spans GitHub, GitLab, and Bitbucket out of the box. Current release: **0.1.0**.
+Next.js 16 + SQLite (`better-sqlite3`), styled with Tailwind CSS 4. Spans GitHub, GitLab, and Bitbucket out of the box. Current release: **0.1.0**.
 
 ![Agent Friendly Code — leaderboard](./public/demo/light.png)
 
@@ -89,7 +89,7 @@ Auth and per-maintainer controls land with the opt-out / claim flow in v0.4.0.
 ```bash
 bun install
 bun run prepare-hooks  # once — installs lefthook pre-commit (Biome + tsc)
-bun run seed           # score the curated set (~27 repos) across GH / GL / BB
+bun run seed           # score the curated set (~28 repos) across GH / GL / BB
 bun run dev            # http://localhost:3000
 ```
 
@@ -113,9 +113,9 @@ Optional: `GITHUB_TOKEN` / `GITLAB_TOKEN` in env to raise API rate limits.
 | Choice                                               | Why                                                                                                                                          | When we'd revisit                                                                                  |
 | ---------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
 | **Next.js 16 (App Router)**                          | Future features (filters, charts, auth, diff views) are React's territory. File-based routing + API routes replace hand-rolled HTTP cleanly. | Unlikely. The core scorer is stack-agnostic, only `app/` depends on this.                          |
-| **Bun runtime**                                      | Native TS, built-in SQLite, fast install + cold boot. Huge npm compat. Faster than Node; better Node-compat than Deno.                       | If a Bun-specific incompatibility surfaces that's not worth working around.                        |
+| **Node runtime (with `tsx` for CLI scripts)**        | Matches Vercel's serverless runtime — no Bun-only imports in prod. Bun still works locally as a fast package manager.                        | Unlikely — only if the deployment target changes.                                                  |
 | **Tailwind CSS 4**                                   | Zero-config via `@theme` tokens, no `tailwind.config.*` needed. Tight bundle output.                                                         | Would only leave for something with a stronger design-system story.                                |
-| **`bun:sqlite`**                                     | Zero deps, single file, inspectable. Avoids native-ABI drama (we tried `better-sqlite3` first and hit it).                                   | Postgres when concurrent writers / access control arrive (`tasks/1.0.0/01-postgres-migration.md`). |
+| **`better-sqlite3`**                                 | Single file, inspectable, zero ops overhead. Node-native so Vercel's serverless runtime can load it directly.                                | Postgres when concurrent writers / access control arrive (`tasks/1.0.0/01-postgres-migration.md`). |
 | **Server components + links, no client JS**          | Cheap, fast, SEO-friendly.                                                                                                                   | When a feature genuinely needs interactivity — e.g. live filter combinators.                       |
 | **Shallow git clones** (`--depth 1 --single-branch`) | Bandwidth + speed. Current signals don't need history.                                                                                       | History-aware signals → host APIs or `--filter=blob:none` partial clones.                          |
 | **Exact-pinned deps**                                | Deterministic scoring across environments.                                                                                                   | Never.                                                                                             |
@@ -147,14 +147,14 @@ lib/
   clients/    git clone, host API
   constants/  thresholds, host labels, sort keys
   utils/      format + score-tier helpers
-  db.ts       bun:sqlite schema + queries (all SQL lives here)
+  db.ts       better-sqlite3 schema + queries (all SQL lives here)
   version.ts  APP_NAME, APP_VERSION, APP_URL, APP_DESCRIPTION, REPO_URL
   changelog.ts / roadmap.ts
-scripts/      Bun-run CLI entries — score, seed, init-db
+scripts/      CLI entries run via `tsx` (Node) — score, seed, init-db
 tasks/        Per-version task breakdown (agent-readable)
 public/       Static assets — demo/ screenshots used by the README + OG image
 .claude/      settings.json, hooks/ (Stop guard), skills/
-data/         SQLite database (gitignored)
+data/         rank.db (committed — shipped as a build artifact; rescoring runs locally)
 tmp-clones/   Shallow clones (gitignored)
 AGENTS.md     Agent instructions (source of truth)
 CONTRIBUTING.md  Human-contributor guide — PR workflow, review bar