Build Team Project social graph and semantic Tailwind system

[doodlewind]

Summary

• add GitHub-style Project Stars, private Watching, and person Follow relationships with public list surfaces and strict Team privacy boundaries
• let a personally authenticated CLI user publish Public, Link-only, or Team-only Sessions into a writable Team-owned Project while preserving the individual author
• add the guarded production migration that moves the reviewed Spool corpus to @paperboy/spool, assigns the canonical doodlewind handle to doodlewind@qq.com, and retains both WorkOS identities
• migrate product styling to a Tailwind v4 semantic-token interface and fix centered avatar fallbacks
• expose Starred/Watching Project scopes, Profile social tabs, Project stargazers, and Team Project public projections

Trust and lifecycle behavior

• a Project is Star-eligible only while it has at least one live Public Session
• private Team Projects remain member-only and may be Watched, never Starred
• withdrawing/moving the last Public Session clears Stars and outsider Watches atomically; current Team-member Watches remain private
• public Project metadata, social state, and stargazers revalidate their route, tenant, viewer, and live projection in the same SQLite snapshot
• membership removal, user deletion, Project archive, and Team archive clean up dependent relations
• watchers are never public; stargazers and Follow lists are public only where documented

CLI behavior

• spool share --project paperboy/spool --public publishes under the Team-owned Project while attributing the signed-in member
• --public, --link-only, and Team-only visibility are independent of Project ownership
• interactive Project creation is materialized only after disclosure and confirmation; cancellation produces no remote Project, upload, or subscription write
• subscriptions preserve the Team owner across auto-publish

Verification

• pnpm run typecheck
• pnpm run test — 1,969 passed, 1 skipped
• pnpm run build
• pnpm run check
• pnpm --filter @spool/backend run schema:smoke — 16 migrations
• pnpm --filter @spool/backend test — 564 passed, including a real SQLite stale-projection regression
• pnpm --filter @spool/web test:e2e — 40 passed across 320/451/768/1024px and Session loading/reader flows
• git diff --check