mopac-pdf v0: markdown to beautiful PDFs via digest-pinned typst

Go CLI that turns the markdown currency of this stack (Redmine notes,
Discourse posts, briefing output) into typeset PDFs: two embedded typst
templates (report with title page/TOC/headers, dense brief), front-matter
(title/subtitle/author/date/classification/template), GFM tables, and
bar charts rendered in pure Go (go-chart) from fenced chart data blocks.
Engine is a prebuilt typst 0.15.1 container pinned by digest and run
--network none; PDF bytes to stdout or -o. Exit codes 0/1/2.

All dev in docker (dev.sh/Makefile); unit tests + golden typst fixtures
plus a host-side smoke against the real engine container.

Generated with Crush

Assisted-by: Crush:glm-5.2

testdata/sample-brief.md

@@ -0,0 +1,38 @@
+---
+title: Client Proposal: Managed Platform
+subtitle: TSYS Group engagement summary
+author: reachableceo
+date: 2026-08-29
+classification: CLIENT CONFIDENTIAL
+template: brief
+---
+
+# Scope
+
+Twelve-month managed platform engagement covering build, run and improve
+for the payments estate. Fixed monthly fee, outcome-linked bonus tier.
+
+# Commercials
+
+| Item | v0 | Notes |
+|:-----|---:|:------|
+| Monthly fee | $18.5K | blended rate |
+| Onboarding | $6K one-time | weeks 1-4 |
+| Bonus tier | +10% | SLA green 3 consecutive months |
+
+```chart
+type: bar
+title: Fee by phase ($K)
+unit: K
+Onboarding: 6
+Run (12mo avg): 18.5
+```
+
+# Why us
+
+- Deep fleet experience: 100+ FLOSS packages in production across Cloudron
+  and Kubernetes
+- Go/PHP/C/Java shop: no node_modules archaeology, no runtime churn
+- Every deliverable is markdown + git: auditable, transferable, yours
+
+Delivery starts two weeks after countersignature.