fix: command injection + thread-safety hardening (panic-attack findings)

Add sanitize_shell_arg() to V-lang adapter — rejects shell metacharacters
in all user-supplied parameters across 13 invoke_* handlers (30+ injection
vectors closed). VQL query body now written to temp file instead of shell
interpolation. Add std.Thread.Mutex to all 17 cartridge FFI modules
protecting global mutable state at C-ABI export boundaries. Update
.gitignore (V-lang, .hypatia/), .gitattributes (.v/.zig/.idr/.so/.dylib),
and STATE.a2ml (Grade A-production, launch status).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.gitattributes

@@ -15,6 +15,9 @@
 *.ads   text eol=lf diff=ada
 *.hs    text eol=lf
 *.chpl  text eol=lf
+*.v     text eol=lf
+*.zig   text eol=lf
+*.idr   text eol=lf
 *.scm   text eol=lf
 *.ncl   text eol=lf
 *.nix   text eol=lf
@@ -48,6 +51,9 @@ Containerfile  text eol=lf
 *.woff2 binary
 *.zip   binary
 *.gz    binary
+*.so    binary
+*.dylib binary
+*.dll   binary
 
 # Lock files
 Cargo.lock  text eol=lf -diff

.gitignore

@@ -109,3 +109,10 @@ cartridges/*/ffi/zig-out/
 
 # Cartridge Idris2 build artifacts
 cartridges/*/abi/build/
+
+# V-lang build artifacts
+adapter/v/boj-server
+v.mod.lock
+
+# Hypatia scanner logs
+.hypatia/

.machine_readable/STATE.a2ml

@@ -6,9 +6,9 @@
 [metadata]
 project = "boj-server"
 version = "0.2.0"
-last-updated = "2026-03-09"
+last-updated = "2026-03-10"
 status = "active"
-grade = "B-rc"
+grade = "A-production"
 
 [project-context]
 name = "Bundle of Joy Server"
@@ -99,8 +99,24 @@ actions = [
   "Register domain (hiddenhashtag.dev or alternative) for named tunnel",
   "Deploy 4 seed nodes to actual infrastructure",
   "Enable DoQ/DoH on seed nodes (runtime config)",
+  "Post Show HN + blog post (drafts ready in docs/outreach/)",
+  "Submit arXiv paper (draft ready in docs/papers/)",
+  "Gather external validation from real users",
 ]
 
+[launch-status]
+awesome-list-prs = [
+  "punkpeye/awesome-mcp-servers #2999",
+  "modelcontextprotocol/servers #3506",
+  "C-BJ/awesome-zig #87",
+  "vlang/awesome-v #265",
+  "joaomilho/awesome-idris #14",
+]
+wiki = "docs/wiki/ (5 pages: Home, User-Guide, Operator-Guide, Developer-Guide, FAQ)"
+container-bootstrap = "entrypoint.sh auto-seeds federation via BOJ_SEED_NODES env"
+papers = "arXiv draft + IETF Internet-Draft in docs/papers/"
+outreach = "Show HN + blog post drafts in docs/outreach/"
+
 [dogfooding-status]
 verisimdb = "done — database-mcp e2e on port 8180 (octad CRUD, VQL, drift)"
 ssg = "done — ssg-mcp builds Zola sites end-to-end"