### Added - Added `AGENTS.md` with repository-specific engineering, testing, and release guidance for future contributors and coding agents. - Added per-repository `Public access` support so published repositories can be exposed without authentication while private repositories remain token-protected. ### Changed - Updated Composer metadata/archive access logic to allow anonymous access only to packages coming from repositories marked as public, while preserving full token-based access for private packages. - Updated `/packages` HTML index behavior so anonymous browsing is blocked whenever any published private repository exists, preventing mixed-visibility package name leakage. ### Testing - Updated controller unit tests for anonymous/public access behavior and mixed-visibility guarding.