Feat v0.3.7 package audit (#20)

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>

packages/employee-onboarding/README.md

@@ -0,0 +1,36 @@
+# Employee Onboarding
+
+Automated employee provisioning with manager signoff and welcome notification.
+
+## Features
+
+- **Starlark automated stages** — `db.insert` for provisioning records, `notifications.send` for alerts
+- **Signoff gate** — manager approval required (role-based), rejection reroutes to start
+- **Progressive fieldsets** — Personal Info + Access Requirements
+- **ext_data tables** — `provisions` and `onboarding_log`
+
+## Stage Flow
+
+```
+[new-hire-info]  →  [provision-accounts]  →  [manager-signoff]  →  [it-setup]  →  [welcome]
+    team              automated (Starlark)      review + signoff       team         automated
+                      auto-advances             reject → stage 0                   auto-advances
+```
+
+## Prerequisites
+
+- Team must have a custom **"manager"** role (via Team Admin > Members > Team Roles)
+- At least one team member with the "manager" role assigned
+
+## Starlark Hooks
+
+- **`on_provision(ctx)`** — Inserts provisioning record into `provisions` table, notifies workflow starter
+- **`on_welcome(ctx)`** — Logs completion to `onboarding_log`, sends welcome notification
+
+## Installation
+
+```bash
+curl -X POST $BASE/api/v1/admin/packages/install \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "file=@packages/employee-onboarding"
+```