[dfradehubs]

Summary

• Default install is now curl + Compose; a built-in demo agent is seeded so the UI chats without opening admin. MCP snippets use http://localhost:8080/mcp instead of the docs-site 404.
• First-run wizard when no agents exist; OIDC via .well-known (Keycloak paths as fallback); basic auth documented as the production path before an IdP. Hero copy is a single promise.
• All-in-one image (ghcr.io/dfradehubs/agentgram) plus optional Go static UI (WEB_STATIC_DIR). Laptop mode embeds Redis + PostgreSQL. SQLite dialect rewrite is prepared but not wired to the pgx repositories.
• OSS hygiene: CONTRIBUTING, issue templates, SECURITY.md, compare page, launch/brand notes. GitHub homepage/topics/Discussions already updated on the repo.
• README and landing now loop a product GIF (docs/demo.gif). Paste-ready Show HN title, URL and first comment: docs/show-hn.md.

Test plan

• cd api && go test ./...
• cd web && npm test
• After merge + image publish: curl the root docker-compose.yaml, docker compose up -d, open http://localhost:3000 and send a message to Demo
• Empty-agent path: disable seed.demo_agent, confirm the first-run wizard registers a REST agent
• CONFIG_PATH=configs/config.laptop.yaml go run ./cmd/server (embedded Redis + Postgres)
• Confirm login still works against Keycloak (discovery fallback) and that a non-Keycloak issuer with a valid .well-known is accepted
• README GIF renders on GitHub (looping, ~11s, 238 KB)

Follow-ups (not in this PR)

• Native SQLite (repositories still use pgx)
• Full Next.js embed in the Go binary (all-in-one still runs Node + Go)
• Hosted demo; actually post Show HN after the next GHCR release (docs/show-hn.md)