chore: reduce instance/dnspegasus to a manifests-only orphan branch

This branch previously carried a full copy of the app, which was wrong twice:
it drifted behind main (11 commits by the end), and syncing it meant
`git merge origin/main`, which silently replaced the three instance manifests
with main's public placeholders — no conflict raised, because only main had
touched those paths.

As an orphan branch with no shared history there is nothing to sync and
nothing to clobber. Clone drops from 1.5M to ~200K. Verified: installing from
this ref yields the same server URL, client ID and callback port as before.

Previous tip was e5abd34 if any of the dropped history is ever wanted.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
-  "name": "triple-c",
+  "name": "dnspegasus",
-  "description": "shared-memory plugin for the triple-c container (OAuth callback on the mapped port 5693).",
+  "description": "Self-hosted Claude Code plugins for the dnspegasus.net infrastructure.",
   "owner": {
     "name": "jknapp",
     "url": "https://repo.anhonesthost.net/jknapp/shared-memory"

README.md

@@ -1,14 +1,41 @@
-# instance/triple-c
+# instance/dnspegasus
 
-Orphan branch — plugin manifests only, for the `triple-c` container.
+This branch is **not** a fork of the project. It is an orphan branch holding
+exactly three files: the Claude Code plugin manifests for one live instance,
+filled in with that instance's real server URL and OAuth client ID.
 
-Identical to `instance/dnspegasus` except **`callbackPort` is 5693** instead of
+```
-33418. The container can only receive an OAuth loopback callback on a port that
+.claude-plugin/marketplace.json      marketplace named `dnspegasus`
-is mapped through from its host, and 5693 is the one that is.
+plugin/.claude-plugin/plugin.json    plugin manifest
-
+plugin/.mcp.json                     server URL + pre-registered OAuth client
-```bash
-claude plugin marketplace add "https://repo.anhonesthost.net/cybercove-labs/shared-memory.git#instance/triple-c"
-claude plugin install shared-memory@triple-c
 ```
 
-Never merge `main` into this branch — see `instance/dnspegasus`'s README.
+Install from it with a `#ref` fragment:
+
+```bash
+claude plugin marketplace add "https://repo.anhonesthost.net/cybercove-labs/shared-memory.git#instance/dnspegasus"
+claude plugin install shared-memory@dnspegasus
+```
+
+## Why it's an orphan branch
+
+It used to be a normal branch off `main`, which was wrong twice over:
+
+- It carried a full copy of the application it had no reason to have, so it
+  drifted behind `main` and a stale deploy could have been cut from it.
+- Syncing it meant `git merge origin/main`, which **silently replaced these
+  three manifests** with `main`'s public placeholders. No conflict was raised,
+  because only `main` had touched those paths.
+
+With no shared history there is nothing to sync and nothing to clobber. Never
+merge `main` into this branch — if the manifest *format* changes upstream,
+hand-edit these files and run `claude plugin validate .`.
+
+`main` carries the same three files with placeholder values, as the public
+template. The real values live only here.
+
+## The client ID is not a secret
+
+`clientId` is a **Public** (PKCE) OAuth client. It is meant to be committed —
+it identifies the client, it does not authenticate it. Access is controlled by
+the bindings on the IdP application, not by keeping this string private.

plugin/.mcp.json

@@ -5,7 +5,7 @@
       "url": "https://memory.dnspegasus.net/api/mcp",
       "oauth": {
         "clientId": "5rkRS3rJhn3Ci9swWkxYMIrZ9OggsjOGy3cIOhYY",
-        "callbackPort": 5693
+        "callbackPort": 33418
       }
     }
   }