aur-shield v0.1.0: AI-powered AUR firewall

- FastAPI server with scan/build/repo endpoints
- LLM scanner (Ollama) with regex pre-scan
- makepkg/devtools builder with chroot isolation
- Scan cache with TTL + PKGBUILD hash
- Client installer + safe-yay wrapper
- Docs + config example

config.example.yaml

@@ -0,0 +1,35 @@
+ollama:
+  url: http://localhost:11434
+  model: qwen2.5:latest
+  timeout: 120
+
+server:
+  host: 0.0.0.0
+  port: 8443
+  repo_dir: /var/cache/aur-shield/repo
+  work_dir: /var/cache/aur-shield/build
+  build_user: nobody  # never build as root
+
+security:
+  block_patterns:
+    - "curl.*\\|.*bash"
+    - "wget.*/tmp/.*\\|.*sh"
+    - "eval.*base64"
+    - "nc\\s+-.*\\d+"
+    - "/dev/tcp/"
+    - "systemctl.*enable.*--now"
+  max_pkg_size_mb: 500
+  allowed_source_schemes:
+    - "https"
+    - "http"
+    - "git"
+    - "ftp"
+    - "file"
+
+cache:
+  ttl_hours: 168  # 7 days
+  max_cache_gb: 10
+
+build:
+  use_devtools: true  # use extra-x86_64-build chroot if available
+  timeout: 600  # 10 min per build