add /quotas endpoint

HF: add quota()

SO: add quota()

github: add quota()probe

console: add /sources card

add /sources endpoint: key presence + last probe status

main: configure stdlib logging with DEVNET_LOG_LEVEL

SO: drop Authorization-None hack, narrow key fallback, keep stdlib logging

fix: only send GitHub token to github hosts; add basic logging

Update src/devnet/sources/stackoverflow.py

Update src/devnet/core/http.py

Update src/devnet/sources/stackoverflow.py

SO: read token from Stack_Overflow_Api_Key env (user's secret name)

core: keep upstream error message in 4xx so SO/HF/GitHub failures are debuggable

SO: /search with bare q 400s; free-text belongs on /search/advanced

smoke: cover stackoverflow + huggingface

add stackoverflow + huggingface routes and probes

add huggingface source

add stackoverflow source

core: map 429 to RateLimited, accept per-call headers

smoke: cover crates

add /v1/crates/package route + health probe

add crates.io source

smoke: assert repo_slug on express, left-pad has no repository field

npm: use /latest, the abbreviated doc strips repository and metadata

core/http: revert unused headers param

add /v1/npm/package route

smoke: cover npm

core/http: allow per-call header overrides

add npm source

remove core.py, now a package

core/http: the only module that does network I/O

core/resource: the canonical shape

core: re-export the public surface

core/errors: the four failure states

fix: explicit param mapping, ids are no longer guessed as API param names

serve the single-file console at /

add: single-file API console

fix: classifier tags must be language names, not version specifiers

devnet: the one runnable check

devnet: MCP tool map over the same backend

devnet: the one runnable check

devnet: README with source table and ceilings

devnet: FastAPI app, routes, health

devnet: github source

devnet: hackernews source

devnet: rss source on stdlib only

devnet: pypi source

devnet: core HTTP, TTL cache, canonical Resource

devnet: sources init