Fix unpinned Action dependencies

Author: webstackdev

.github/workflows/build-release.yml

@@ -29,7 +29,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
 
       - name: Lint chart
         run: helm lint deploy/helm/newsletter-maker
@@ -87,7 +87,7 @@ jobs:
           docker/web/Dockerfile .
 
       - name: Scan backend image with Trivy
-        uses: aquasecurity/trivy-action@v0.36.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
         with:
           image-ref: newsletter-maker-ci:${{ github.sha }}
           scan-type: image
@@ -97,7 +97,7 @@ jobs:
 
       - name: Log in to GHCR
         if: github.event_name == 'push'
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/lint.yml

@@ -36,13 +36,13 @@ jobs:
           cache-dependency-path: frontend/package-lock.json
 
       - name: Install just
-        uses: extractions/setup-crate@v2
+        uses: extractions/setup-crate@7577c1bdf2d95e6d65d532788f35ed79d4b1dda2 # v2
         with:
           repo: casey/just@1.50.0
           github-token: ${{ github.token }}
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
 
       - name: Install dependencies
         run: just install

.github/workflows/test.yml

@@ -36,7 +36,7 @@ jobs:
           cache-dependency-path: frontend/package-lock.json
 
       - name: Install just
-        uses: extractions/setup-crate@v2
+        uses: extractions/setup-crate@7577c1bdf2d95e6d65d532788f35ed79d4b1dda2 # v2
         with:
           repo: casey/just@1.50.0
           github-token: ${{ github.token }}

README.md

@@ -81,15 +81,6 @@ The system is designed for graceful failure, not silent corruption. Unparseable
 
 **Deployment:** Docker Compose (MVP) · Kubernetes-ready · 12-factor configuration
 
-## Implementation Plan
-
-| Phase | Focus | Key Deliverables |
-| ----- | ----- | ---------------- |
-| **1. MVP** | Content ingestion + basic surfacing | RSS and Reddit plugins · Entity model in Postgres · Qdrant for embeddings · Classification, relevance scoring, and summarization skills · Dashboard with upvote/downvote · Seed script for demo data |
-| **2. Authority** | Newsletter ingestion + authority signals | Resend email intake with LLM extraction · Subscription confirmation flow · Authority scoring from mention frequency · Bluesky plugin · Deduplication and entity extraction skills |
-| **3. Intelligence** | Expanded sources + trend analysis | Mastodon plugin · Trend velocity detection · Theme suggestions · Source diversity analysis · Original content idea generation |
-| **4. Polish** | Advanced features | LinkedIn integration · Automated entity discovery · Full multi-signal authority model · Newsletter draft generation |
-
 ## Project Documentation
 
 - [Developer Guide](docs/DEVELOPER_GUIDE.md) gives a fast "where to look first" map for new contributors.