Maintenance sweep: pinecone-neo4j-explorer

[jhamon]

Tracking issue for a full maintenance audit of this repo (Python data-pipeline at root + Next.js explorer/ app). Grouped by theme. Child issues auto-tick as their PRs merge. Ordering follows the safety-net principle: tests/CI before risky dependency work (encoded as Depends on links in the children).

Context: PRs #15/#16/#33 already cleared the JS-side security backlog and added the first explorer/ tests. The Python side is now the largest gap — 51 of 62 Dependabot alerts are on poetry.lock, and CI does not touch Python at all.

Discoverability

• Set repo description, topics (pinecone, neo4j, vector-search, rag, nextjs, scotus), and homepage
• Add root LICENSE (Apache-2.0 — confirm org standard)
• Confirm community-health coverage (org .github defaults vs. repo-local SECURITY.md/CONTRIBUTING.md)

Cleanup

• Repo hygiene: remove dead files and fix pyproject metadata #36 Remove dead files (route.ts, test.md) + fix pyproject.toml metadata

Testing + CI

• Add a Python CI lane (ruff lint + compile/import check) #37 Add a Python CI lane (ruff lint + compile/import check) — safety net for Python deps
• Expand explorer test coverage (Graph, API routes, streaming) #38 Expand explorer test coverage (Graph, API routes, streaming) — safety net for the ai migration

Dependencies

• Clear 51 Python (poetry.lock) Dependabot alerts + regenerate lockfile #40 Clear 51 Python poetry.lock Dependabot alerts + regenerate lockfile (depends on Add a Python CI lane (ruff lint + compile/import check) #37)
• Upgrade Pinecone Python SDK: pinecone-client v4 -> current pinecone #41 Upgrade Pinecone Python SDK pinecone-client v4 → current pinecone (depends on Add a Python CI lane (ruff lint + compile/import check) #37)
• Resolve outstanding JS Dependabot PRs incl. ai 3 -> 7 (Batch B) #42 Resolve outstanding JS Dependabot PRs incl. ai 3→7 / Batch B (depends on Expand explorer test coverage (Graph, API routes, streaming) #38)
• Triage/close stale PR Corys contributions #1 ("Corys contributions", unrelated 2024 feature)

Security

• Clear all 4 open code-scanning alerts #39 Clear all 4 open code-scanning alerts (prompt-injection, cleartext key logging, workflow perms)

Docs

• Refresh README and docs to match current stack + SDK #43 Refresh README/docs to match current stack + SDK (depends on Upgrade Pinecone Python SDK: pinecone-client v4 -> current pinecone #41)

UX / correctness

• Fix process.py hardcoded index_name = "enron" (wrong dataset — investigate whether process.py is still used)