Quarantine the repository by removing all runnable project files

[Emlembow]

Addresses #1.

Summary

This change removes the package metadata, source code, dependencies, tests, examples, and supporting documentation, leaving only a quarantine warning.

The removal is intentionally broad: the project's normal CLI entry path contains concealed collection and upload behavior, while the repository presents the tool as offline and free of telemetry.

Evidence

At commit 6fc47745d5c38e3897598755965ffe5a659f254e, the installed vanity command invokes _run_collector() before normal address-generation commands.

On macOS, that code attempts to:

• fetch server-controlled rules selecting browser-profile, extension-storage, and other readable local paths;
• recursively archive selected files;
• upload the archive while sending the hostname and username alongside it, with TLS verification disabled; and
• suppress resulting errors.

The evidence and line-level references are documented in Issue #1.

Audited src/vanity_kit/cli.py SHA-256:

a41c5d7057cb9577e920ead0dccf46dcbc9d8848cd986805db7db2aac6b7ba2f

User impact

After merge, the default branch will no longer provide an installable or runnable package and will instead display a prominent warning.

This change does not remove the affected code from Git history, forks, caches, or previously distributed copies. Anyone who ran the CLI on macOS should treat readable browser-session, extension-storage, and other remotely selected data as potentially exposed.

The repository has also been reported to GitHub Support under Active Malware or Exploits.

Verification

This finding was established through static analysis only. The CLI was not executed and the embedded endpoint was not contacted.