ci: add daily thesis post workflow + post first 2 items

Replace local cron (unreliable — machine sleep) with GitHub Actions
workflow running at 14:00 UTC daily. Workflow commits queue status
back to repo after each post.

Posts #1 and #2 published manually to catch up on overdue items.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ccross2

.github/workflows/daily-post.yml

@@ -0,0 +1,61 @@
+name: Daily Thesis Post
+
+# Posts the next pending item from content-queue.json at 10 AM ET (14:00 UTC).
+# Commits the updated queue back so posted status is tracked in git.
+
+on:
+  schedule:
+    - cron: "0 14 * * *"
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: "Preview only, no post"
+        required: false
+        default: false
+        type: boolean
+
+permissions:
+  contents: write
+
+jobs:
+  post:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Post next queued item
+        env:
+          TWITTER_API_KEY: ${{ secrets.TWITTER_API_KEY }}
+          TWITTER_API_SECRET: ${{ secrets.TWITTER_API_SECRET }}
+          TWITTER_ACCESS_TOKEN: ${{ secrets.TWITTER_ACCESS_TOKEN }}
+          TWITTER_ACCESS_SECRET: ${{ secrets.TWITTER_ACCESS_SECRET }}
+        run: |
+          if [ "${{ inputs.dry_run }}" == "true" ]; then
+            node scripts/daily-post.js --dry-run
+          else
+            node scripts/daily-post.js
+          fi
+
+      - name: Commit queue update
+        if: inputs.dry_run != 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          if git diff --quiet scripts/content-queue.json; then
+            echo "No queue changes to commit (no post was due or post failed)"
+          else
+            git add scripts/content-queue.json
+            git commit -m "post: mark queued item as posted [automated]"
+            git push
+          fi

scripts/content-queue.json

@@ -6,19 +6,19 @@
       "id": 1,
       "text": "Most privacy tools ask you to trust someone else's server. We think that is a contradiction. Sovereign means your hardware, your keys, your compute. No exceptions.",
       "category": "thesis",
-      "status": "pending",
+      "status": "posted",
       "scheduled": "2026-03-29",
-      "posted_at": null,
-      "tweet_id": null
+      "posted_at": "2026-03-30T13:53:36.410Z",
+      "tweet_id": "2038615629108830271"
     },
     {
       "id": 2,
       "text": "Privacy is not a spectrum. Either the data stays on your hardware or it does not. There is no \"mostly private.\"",
       "category": "thesis",
-      "status": "pending",
+      "status": "posted",
       "scheduled": "2026-03-30",
-      "posted_at": null,
-      "tweet_id": null
+      "posted_at": "2026-03-30T13:53:40.719Z",
+      "tweet_id": "2038615647207195049"
     },
     {
       "id": 3,