feat: serve signed catalog feed change pages

[giodl73-repo]

Summary

• expose GET /api/v1/feeds/plugins/changes with a revision range pinned on the first request
• sign change pages, retention resets, and five-minute continuation cursors with the ClawHub feed signer
• bind cursors to the feed, sequence range, exact change count, Convex cursor, page/offset, limit, and expiry
• enforce 500-record and 1 MiB response bounds and document the public transport contract
• use standard DSSE envelope fields and the application/vnd.dsse+json media type

Stack

Draft stack PR. Depends on:

• feat(schema): add scalable catalog feed projections #3147 catalog projection wire schemas
• feat(feeds): add catalog distribution state #3149 durable revision/change journal
• feat(feeds): add dormant catalog signing foundation #3005 ClawHub DSSE feed signer

The transport-specific change starts at ee662222; DSSE interoperability corrections are included at f31ddc82, 9d613082, and 862f4665. Dependency commits remain included until the lower stack lands.

Validation

• bun x vitest run convex/httpApiV1.catalogFeedChanges.test.ts convex/httpApiV1.catalogFeedSigning.test.ts convex/catalogFeed.test.ts packages/schema/src/catalogFeedDistribution.test.ts (39 passed)
• bun x tsc --noEmit
• bun run lint
• targeted oxfmt --check
• git diff --check
• Codex review: custom envelope fields and snapshot media type fixed; no remaining accepted/actionable findings (the repeated Base64URL comment conflicts with DSSE 1.0.2, which permits URL-safe encoding)

Not in this PR

• indexed catalog query projection
• sharded snapshots or removal of the current skills snapshot cap
• unsigned skills/promotions change routes

[vercel]

Someone is attempting to deploy a commit to the OpenClaw Foundation Team on Vercel.

A member of the Team first needs to authorize it.

[clawsweeper]

ClawSweeper status: review started.

I am starting a fresh review of this pull request: feat: serve signed catalog feed change pages This is item 1/1 in the current shard. Shard 3/4.

This placeholder means the worker is alive and reading the current context. I will edit this same comment with the actual review when the claws are done clicking.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.

[giodl73-repo]

Superseded by #3160, which now combines signed changed-since transport and indexed signed query transport over the shared catalog distribution state.