Fork ssb-viewer as custo-viewer

Rebrand package.json (name, homepage, repository) so render.js's page footer,
which is built from pkg.homepage + git HEAD, points at this repo rather than
upstream's ssb:// URL.

Track package-lock.json instead of ignoring it. It was gitignored upstream, but
this is a deployed application on a 469MB box running node 18 — a reproducible
dependency tree is the difference between RESTORE.md working and not.

Upstream's README is kept verbatim as UPSTREAM-README.md; the new one documents
the custo data model, including the two things that will otherwise cost someone
an afternoon: custodisco is the string "true", and no message ever sets
content.channel.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0192zBTNZKZn5svyJ5HTnYds

package.json

@@ -1,13 +1,13 @@
 {
-  "name": "ssb-viewer",
+  "name": "custo-viewer",
   "version": "1.0.0",
-  "description": "serve ssb threads as (embeddable) web pages",
+  "description": "custo's web view of scuttlebutt - the item feed behind www.cust.ooo",
   "main": "index.js",
   "bin": "bin.js",
-  "homepage": "https://git.scuttlebot.io/%25MeCTQrz9uszf9EZoTnKCeFeIedhnKWuB3JHW2l1g9NA%3D.sha256",
+  "homepage": "https://git.autonomic.zone/trav/custo-viewer",
   "repository": {
     "type": "git",
-    "url": "ssb://%MeCTQrz9uszf9EZoTnKCeFeIedhnKWuB3JHW2l1g9NA=.sha256"
+    "url": "ssh://git@git.autonomic.zone:2222/trav/custo-viewer.git"
   },
   "dependencies": {
     "asyncmemo": "^1.0.0",
@@ -31,6 +31,6 @@
   "devDependencies": {
     "tape": "^4.6.2"
   },
-  "author": "cel",
+  "author": "trav (fork of ssb-viewer by cel)",
   "license": "AGPL-3.0+"
 }