Maintenance sweep: recommender-example-typescript

[jhamon]

Maintenance sweep for this repo, filed by an audit against the seven standard themes (discoverability, cleanup, testing/CI, dependency hygiene, security, docs, UX). Substantive items are tracked as child issues; trivia are checkboxes below. Each child is self-sufficient for one scoped PR.

Already done (context — no action)

• Upgrade @pinecone-database/pinecone v2 → v8 (Upgrade Pinecone SDK v2 → v8 (fixes #5) #22) — now on latest stable (8.0.0)
• Source structure + code-quality refactor (Improve project structure and code quality #23)
• Test suite + CI foundation (lint / format / typecheck / test, Node 20/22 matrix, non-blocking npm audit)
• README synced to current code
• Single authoritative lockfile; LICENSE present (MIT)

Security

• ci: set least-privilege GITHUB_TOKEN permissions in workflow #24 — set least-privilege GITHUB_TOKEN permissions in ci.yml (resolves 2 open CodeQL alerts) · safe

Testing + CI

• test: add credential-gated integration test against a live Pinecone index #25 — add credential-gated integration test against a live Pinecone index (self-skips without secrets) · needs-verification

Discoverability & Presentation

• docs: add community-health files (SECURITY, CODE_OF_CONDUCT, CONTRIBUTING) #26 — add community-health files: SECURITY / CODE_OF_CONDUCT / CONTRIBUTING (not covered by org defaults) · safe
• Set GitHub About: description (reuse package.json description), topics (pinecone, vector-database, recommender, similarity-search, embeddings, typescript), and homepage — via gh repo edit

Cleanup & Hygiene

• Fill empty "author" field in package.json

Deliberately not filed

• SDK upgrade — already on latest stable (8.0.0).
• LICENSE — MIT; sibling Pinecone examples vary (SDK is Apache-2.0, semantic-search-example is MIT), so MIT is acceptable for an example. Revisit only if the org mandates Apache-2.0.