feat(webring): Random link in the Profullstack ring footer

[ralyodio]

Adds the Profullstack webring footer links per the 2026-10-10 ring spec: a Random (⚄) hop alongside << / >>, with from= set to the site's canonical homepage.

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

20 finding(s)

HIGH/CRITICAL: 3 | MEDIUM: 13 | LOW: 4

Severity	Rule	Location
HIGH	sh-remote-script-execution	public/install.sh:302
HIGH	sh-remote-script-execution	public/install.sh:305
HIGH	sh-remote-script-execution	public/install.sh:432
MEDIUM	js-open-redirect	app/dashboard/[[...tab]]/page.tsx:67
MEDIUM	js-open-redirect	app/signup/page.tsx:38
MEDIUM	js-open-redirect	components/PitSearch.tsx:118
MEDIUM	js-unescaped-html-sink	components/Tenant.tsx:29
MEDIUM	js-unescaped-html-sink	components/Tenant.tsx:30
MEDIUM	js-unescaped-html-sink	components/Tenant.tsx:73
MEDIUM	js-unescaped-html-sink	components/Tenant.tsx:147
MEDIUM	sql-template-interpolation	lib/db.ts:1117
MEDIUM	sql-template-interpolation	lib/db.ts:1147
MEDIUM	redos-nested-quantifier	lib/markdown.ts:109
MEDIUM	sh-remote-script-execution	public/install.sh:123
MEDIUM	sh-remote-script-execution	public/install.sh:127
MEDIUM	sh-remote-script-execution	public/install.sh:146
LOW	secret-generic-credential	tests/domain-webhook-active.test.mjs:18
LOW	secret-generic-credential	tests/domain-webhook-active.test.mjs:25
LOW	secret-generic-credential	tests/domain-webhook-active.test.mjs:30
LOW	secret-generic-credential	tests/project-webhook-management.test.mjs:53

Snippets are redacted; ThreatCrush never prints matched credential material.