chore: initial public release — Open Dynamic Workflow (odw + pandacode)

Why:  open-source the dynamic-workflow runner and its executor as one Cargo
      workspace, so an agent gets the whole thing out of the box: clone →
      ./install.sh → odw doctor → run.
What:
- Monorepo (Cargo workspace): odw/ orchestrates the workflow graph and
  dispatches every agent() node to an executor; pandacode/ is that executor
  (codex / claude / bamboo domestic-LLM runtimes) behind one CLI shape.
- Fresh single-commit history (internal dogfood history dropped); tree is
  leak-audited clean (no secrets, paths, or private infra names).
- Top-level README/LICENSE/install.sh + one consolidated CI gate
  (build + test + clippy + odw parity selftest).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: claude

.github/workflows/ci.yml

@@ -0,0 +1,39 @@
+name: CI
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+  workflow_dispatch:
+
+env:
+  CARGO_TERM_COLOR: always
+  RUSTFLAGS: "-D warnings"
+
+jobs:
+  gate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy
+      - name: Install Node (odw selftest runs under cargo test)
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Cache cargo
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+      - name: Build (both crates)
+        run: cargo build --locked --all-targets
+      - name: Test (includes odw parity selftest)
+        run: cargo test --locked
+      - name: Clippy (warnings = errors)
+        run: cargo clippy --all-targets -- -D warnings

.gitignore

@@ -0,0 +1,17 @@
+# Build output (single workspace target at the repo root)
+/target
+**/target/
+
+# Generated by `odw init` / `odw exec` and by pandacode at runtime — never source
+**/.odw/
+**/.claude/
+**/.pandacode/
+
+# Local secrets / env — never commit
+*.env
+.env
+**/live.env
+
+# Node / OS
+**/node_modules/
+.DS_Store