docs(readme): add cloud backup via Rclone workflow

When: 2025-08-31T00:45:00Z
Why: The template includes a GitHub Actions backup workflow calling a
     shared cloud-sync workflow and Setup Rclone Action. This is a free
     alternative to paid backup tools. It’s safe by default and requires
     an RCLONE_CONFIG repo secret to run.
What changed:
- README.md: added “☁️ GitHub Actions cloud sync backup (Rclone)”
  subsection with links, safety notes, secret requirement, and opt-out.
  Also added the item to the top “What’s in the box” list.
- .stan/system/stan.todo.md: recorded the docs update and added next
  steps (set RCLONE_CONFIG or remove sync.yml).

Author: karmaniverous

.stan/system/stan.todo.md

@@ -1,4 +1,4 @@
-When updated: 2025-08-31T00:28:00Z
+When updated: 2025-08-31T00:45:00Z
 
 Next up
 
@@ -8,9 +8,13 @@ Next up
 - Re-run: npm run lint to confirm the Windows tseslint parser fix.
 - Normalize line endings to LF if you see CRLF noise: • git add --renormalize . • npm run lint:fix • commit the normalization
 - Verify lint includes /playground and excludes only generated output.
+- To enable cloud backups, set the RCLONE_CONFIG repo secret (see Setup Rclone Action). If you don’t want backups, delete .github/workflows/sync.yml.
 
 Completed (recent)
 
+- README: documented GitHub Actions cloud sync backup via Rclone; added safety/secret/opt‑out notes and links.
+- README: added STAN to “What’s in the box” and a new “In The Box” section with emoji-rich, linked subsections; updated Contents.
+- Lint: sorted imports and ensured EOF newline in eslint.config.ts to satisfy simple-import-sort and Prettier.
 - Deduped ESLint config: shared Prettier/import-sort for JS/TS; kept TS-specific rules; expanded Vitest test globs to include JS.
 - Fixed ESLint parser error on Windows by setting parserOptions.tsconfigRootDir = path.resolve() in eslint.config.ts.
 - Clarified lint/format policy: include /playground; exclude generated outputs; rely on editor Prettier (no new Lefthook script).

README.md

@@ -20,6 +20,7 @@ What's in the box:
 - 📚 TypeDoc for API documentation
 - 🚀 release‑it for releases (optional Lefthook Git hooks)
 - 🤖 STAN — AI‑assisted refactoring & patch workflow
+- ☁️ GitHub Actions cloud sync backup (Rclone)
 - 🧩 Peer dependencies: react, react‑dom (>=18); sideEffects: false
 
 Contents
@@ -97,10 +98,18 @@ Delightful defaults with modern tooling — batteries included, no drama.
 - STAN: https://github.com/karmaniverous/stan
 - A rigorous, patch‑first assistant that helps refactor safely, keep docs in sync, and maintain clean diffs
 
+### ☁️ GitHub Actions cloud sync backup (Rclone)
+
+- Workflow: this repo ships a backup workflow at `.github/workflows/sync.yml` which calls a shared workflow: https://github.com/karmaniverous/gha-workflows/blob/main/.github/workflows/cloud-sync.yml
+- It leverages the Setup Rclone Action: https://github.com/marketplace/actions/setup-rclone-action
+- Free and useful: a simple, no‑cost alternative to pricey GitHub backup tools.
+- Safe by default: a clone from this template will NOT back up to anyone’s cloud without credentials. The action will FAIL unless the `RCLONE_CONFIG` repo secret is set (providing auth + destination).
+- Don’t want it? Just delete `.github/workflows/sync.yml`.
+- See the action page for details on configuring `RCLONE_CONFIG`.
+
 ### 🧩 Peer dependencies & tree‑shaking
 
-- peerDependencies (npm): https://docs.npmjs.com/files/package.json/
-- `sideEffects: false` (tree‑shaking hint): https://webpack.js.org/guides/tree-shaking/
+- peerDependencies (npm): https://docs.npmjs.com/files/package.json/- `sideEffects: false` (tree‑shaking hint): https://webpack.js.org/guides/tree-shaking/
 
 ---