Keep the Marketplace channel unlisted until the first publish

The Marketplace listing and @v0 only resolve after the one-time Developer
Agreement acceptance and the first release that ships action.yml. Listing
it before then would show a dead "Available on" link, so hide it until live
(the WinGet pattern):

- Set unlisted: true on the channel; sync-channels keeps it out of the
  website install picker and the "Available on" strip.
- Re-add the install-guide table glob exclusion, and exclude it from the
  release-pipeline push table too (Marketplace publish is a manual checkbox,
  not a credentialed automated job).
- Add Operational Checklist item 8 in release.md: accept the Marketplace
  agreement on the first action release. The channel doc carries the full
  one-time steps and the flip-when-live instructions.

The action.yml, the marketplace-major-tag workflow, and the docs stay in
place; only the user-facing listings wait for the first publish.

https://claude.ai/code/session_01TKgJTS4UcFPqtdwkxYzTUC

Author: claude

docs/development/release-channels/github-actions.md

@@ -16,6 +16,7 @@ credential: GITHUB_TOKEN
 job: release
 channelurl: https://github.com/marketplace/actions/mdsmith
 weight: 15
+unlisted: true
 ---
 # GitHub Actions
 
@@ -86,3 +87,10 @@ and `@v0` resolve. Until then, pin to a commit SHA on
 You can also skip the action entirely. Run the release
 binary in a `run:` step. That repeats by hand the download
 and verify steps the action automates.
+
+While the listing is pending, the channel stays hidden. It
+sets `unlisted: true`. `sync-channels` then keeps it out of
+the install picker and the "Available on" strip. The
+install-guide and release-pipeline tables exclude it by
+glob. Flip `unlisted` and drop both glob exclusions once the
+listing resolves.

docs/development/release.md

@@ -12,15 +12,14 @@ summary: >-
 ---
 # Release Pipeline
 
-`.github/workflows/release.yml` publishes mdsmith to every
-channel below. Release-time secrets travel as short-lived
-OIDC tokens. The remaining long-lived PATs are gated by the
-`release` GitHub environment. Each channel has its own file
-under `release-channels/`; the catalog re-renders on
-`mdsmith fix`.
+`.github/workflows/release.yml` publishes mdsmith to every channel
+below. Release-time secrets travel as short-lived OIDC tokens. The
+remaining long-lived PATs are gated by the `release` GitHub
+environment. Each channel has its own file under `release-channels/`;
+the catalog re-renders on `mdsmith fix`.
 
 <?catalog
-glob: ["release-channels/*.md", "!release-channels/proto.md"]
+glob: ["release-channels/*.md", "!release-channels/{proto,github-actions}.md"]
 where: 'mechanism: "push"'
 sort: title
 header: |
@@ -31,7 +30,6 @@ row: "| [{title}]({filename}) | <{channelurl}> | {credential} |"
 | Channel                                                                    | Release page                                                          | Credential              |
 | -------------------------------------------------------------------------- | --------------------------------------------------------------------- | ----------------------- |
 | [Flatpak](release-channels/flatpak.md)                                     | <https://github.com/jeduden/mdsmith/releases>                         | GITHUB_TOKEN + OIDC     |
-| [GitHub Actions](release-channels/github-actions.md)                       | <https://github.com/marketplace/actions/mdsmith>                      | GITHUB_TOKEN            |
 | [GitHub Releases](release-channels/github-releases.md)                     | <https://github.com/jeduden/mdsmith/releases>                         | GITHUB_TOKEN + OIDC     |
 | [npm](release-channels/npm.md)                                             | <https://www.npmjs.com/package/@mdsmith/cli>                          | OIDC Trusted Publishing |
 | [Obsidian](release-channels/obsidian.md)                                   | <https://github.com/jeduden/mdsmith/releases>                         | GITHUB_TOKEN + OIDC     |
@@ -379,6 +377,8 @@ place.
    set. With `gate` in every credential job's `needs:`,
    it is the only release gate, and the workflow (not a
    maintainer) creates the tag.
+8. [ ] Accept the GitHub Marketplace agreement on the
+   first action release (see `release-channels/github-actions.md`).
 
 ## Verifying a Released Artifact
 

docs/guides/install.md

@@ -43,6 +43,7 @@ glob:
   - "../development/release-channels/*.md"
   - "!../development/release-channels/proto.md"
   - "!../development/release-channels/winget.md"
+  - "!../development/release-channels/github-actions.md"
 where: 'artifact: "cli"'
 sort: numeric:weight
 header: |
@@ -64,7 +65,6 @@ row: "| {title} | `{command}` | {audience} |"
 | GitHub Releases | `curl -LO https://github.com/jeduden/mdsmith/releases/latest/download/mdsmith-<os>-<arch>`                                                | Air-gapped hosts and direct binary control        |
 | Scoop           | `scoop install mdsmith`                                                                                                                   | Windows users with Scoop installed                |
 | Flatpak         | `curl -LO https://github.com/jeduden/mdsmith/releases/latest/download/mdsmith-x86_64.flatpak && flatpak install ./mdsmith-x86_64.flatpak` | Sandboxed Linux x86_64 desktops via Flatpak       |
-| GitHub Actions  | `uses: jeduden/mdsmith@v0`                                                                                                                | Linting Markdown inside GitHub Actions CI         |
 <?/catalog?>
 
 A bare `mise use mdsmith@latest` needs a registry entry —

website/data/channels.yaml

@@ -174,15 +174,3 @@
     - editor
   url: https://github.com/jeduden/mdsmith/releases
   weight: 14
-- title: GitHub Actions
-  summary: 'A composite action at the repository root downloads the checksum-verified release binary for the runner''s OS and architecture and puts `mdsmith` on `PATH`; published to the GitHub Marketplace and referenced as `uses: jeduden/mdsmith@v0`.'
-  mechanism: push
-  artifact: cli
-  command: 'uses: jeduden/mdsmith@v0'
-  audience: Linting Markdown inside GitHub Actions CI
-  platforms:
-    - linux
-    - macos
-    - windows
-  url: https://github.com/marketplace/actions/mdsmith
-  weight: 15