Feat v0.3.6 demo workflows + interactive demo

Four example workflow packages proving the engine end-to-end:
- Bug Report Triage: public entry, branch routing, SLA timer
- Employee Onboarding: Starlark automated stages, signoff gate
- Content Approval: multi-party signoff, revision cycle loop
- Webhook Notifier: http.post, connections fallback, delivery logging

Demo surface at /s/workflow-demo with cards, stage diagrams, Starlark
viewer, API examples, active/published status, and copyable public links.

Engine fixes: started_by in automated context, sla_seconds in package
installer, parseSnapshotStages for wrapped/legacy formats.

Platform fixes: extension SDK boot in base.html (Preact globals + boot()),
admin teams paginated response extraction, workflow adoption endpoint
(POST /teams/:teamId/workflows/:id/adopt), team-admin copyable link.

Review pass remains on roadmap for remaining UI polish.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/employee-onboarding/README.md

@@ -0,0 +1,36 @@
+# Employee Onboarding
+
+Automated employee provisioning with manager signoff and welcome notification.
+
+## Features
+
+- **Starlark automated stages** — `db.insert` for provisioning records, `notifications.send` for alerts
+- **Signoff gate** — manager approval required (role-based), rejection reroutes to start
+- **Progressive fieldsets** — Personal Info + Access Requirements
+- **ext_data tables** — `provisions` and `onboarding_log`
+
+## Stage Flow
+
+```
+[new-hire-info]  →  [provision-accounts]  →  [manager-signoff]  →  [it-setup]  →  [welcome]
+    team              automated (Starlark)      review + signoff       team         automated
+                      auto-advances             reject → stage 0                   auto-advances
+```
+
+## Prerequisites
+
+- Team must have a custom **"manager"** role (via Team Admin > Members > Team Roles)
+- At least one team member with the "manager" role assigned
+
+## Starlark Hooks
+
+- **`on_provision(ctx)`** — Inserts provisioning record into `provisions` table, notifies workflow starter
+- **`on_welcome(ctx)`** — Logs completion to `onboarding_log`, sends welcome notification
+
+## Installation
+
+```bash
+curl -X POST $BASE/api/v1/admin/packages/install \
+  -H "Authorization: Bearer $TOKEN" \
+  -F "file=@packages/employee-onboarding"
+```