chore: curate 0.6.0 public release payload

[kwalus]

Summary

• promote the reviewed 0.6.0 public release payload from Canopy-Dev into the public Canopy repo
• include the refreshed public docs and Meshspaces onboarding while excluding internal dev-mirror, Copilot, release-process, publication, local-only, and demo/showcase asset payloads
• keep the promotion scoped to the slimmer curated allowlist generated from the tightened public-release exclusion rules

Test plan

• Generated the slim public candidate file set from the reviewed exclusion rules
• Spot-checked that internal scripts, release-process docs, publication artifacts, screenshots, media, and demo module assets were excluded
• Verified public-facing docs like README, SECURITY, QUICKSTART, MESHSPACES, AGENT_ONBOARDING, and MCP_QUICKSTART remain included
• Human review of the public PR diff before merge

[kwalus]

Superseded by #65. Closing this earlier public-release PR because the curated payload still included scripts/bump_version.py, which should not be part of the first public product-facing repo payload.