[brionmario]

Purpose

Gives every sample README a banner in the ThunderID repo banner style, hosts the banners in this repository, and adds an agent skill so new samples get one the same way.

Repository	React quickstart
iOS quickstart	Better Auth integration

Approach

• .agent/skills/sample-banner/ holds the banner design (template/banner.css), the ThunderID mark and other shared SVGs, the technology logos with their sources (assets/logos/logos.json), and one entry per banner in banners.json.
• scripts/render.cjs builds each banner and screenshots it with Playwright at 2x with a transparent background, giving 2000 by 840 PNGs in .github/assets/banners/. It has no dependencies in the repo; the skill gives the npx command.
• Each sample README now opens with its banner, referenced by an absolute raw.githubusercontent.com URL so it also renders inside the release zips. The root README banner moves from the thunderid repo to .github/assets/banners/samples.png.
• Removes the Open in StackBlitz buttons from the quickstart READMEs, since they don't work.
• New AGENTS.md describes the repo layout and routes any new sample or banner change to the skill. CLAUDE.md loads AGENTS.md, and .claude/skills links to .agent/skills.

npm instead of pnpm (second commit)

• Every JavaScript sample now ships a package-lock.json. The pnpm lockfiles and pnpm-workspace.yaml files are gone; their settings move to overrides (the postcss pin in nextjs and better-auth-nextjs) and allowScripts in package.json.
• The PR builder installs with npm ci and caches through setup-node. npm audit has no ignore list, so the audit step checks high and critical advisories against AUDIT_ALLOWED_GHSAS, the same two nuxt advisories that pnpm ignored and that Dependency Review already allows.
• The release workflow also commits package-lock.json, since npm version bumps it.
• READMEs and the in-app config hints use npm install and npm run dev. The nextjs and nuxt READMEs gain the install step they were missing.
• React goes to 19.2.9 in b2b/manage and self-care/account. react-router@8.3.0 needs >=19.2.7, which pnpm only warned about and npm refuses.
• AGENTS.md tells agents to use npm for samples, and to go along with pnpm or yarn only when the developer insists, flagging the CI change that needs.

Every sample was installed with npm ci, audited, format-checked, linted and built locally.

The banner URLs point at main, so they render once this merges. The previews above use the branch.

Related Issues

• Move the SDK quickstart samples to the thunder-id/samples repository thunderid#5904

Related PRs

• N/A

Checklist

• Followed the contribution guidelines.
• Manual test round performed and verified.
• Documentation provided. (Add links if there are any)
• Tests provided. (Add links if there are any)
  • Unit Tests
  • Integration Tests
• Breaking changes. (Fill if applicable)
  • Breaking changes section filled.
  • breaking change label added.

Security checks

• Followed secure coding standards.
• Confirmed that this PR doesn't commit any keys, passwords, tokens, usernames, or other secrets.