Initial pack: Peergos EU audit verification and DataCube audit-ready checklist

Cure53 Berlin 2019 and ROS Amsterdam 2024 are pentests, not HIPAA/SOC2/ISO
certificates. BAA/DPA guidance for ciphertext-at-rest on cryptree+IPFS.

.forgejo/workflows/ci.yml

@@ -0,0 +1,19 @@
+name: ci
+on:
+  push:
+  pull_request:
+jobs:
+  markdown:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: required files
+        run: |
+          test -f README.md
+          test -f LICENSE
+          test -f PEERGOS-VERIFICATION.md
+          test -f BAA-DPA.md
+          test -f CHECKLIST.md
+          grep -q "not a HIPAA" README.md
+          grep -q "Cure53" PEERGOS-VERIFICATION.md
+          grep -q "Radically Open Security" PEERGOS-VERIFICATION.md