[tonyputi]

Summary

Add two independently maintained Pi extensions by tonyputi to both the English and Chinese READMEs, following the existing entry format:

• pi-github-app-auth → Security & Permission: a separate GitHub App installation identity with short-lived tokens for git and gh commands in Pi's agent bash tool, without changing personal terminal credentials. The description is scoped to that tool, not arbitrary external tools or a sandbox.
• pi-lightpanda → Browser Automation: Lightpanda-backed headless browser tools with CDP navigation, page interaction, and structured extraction. The description explicitly notes the lack of graphical rendering and screenshots, without repeating upstream performance benchmarks.

Each entry includes its source repository, author attribution, and the documented pi install npm:<package> command. Neither package is presented as an official Pi component or endorsed by Pi maintainers. No extension functionality or releases are changed.

Validation

• Rechecked both upstream READMEs and open PRs/issues for duplicate submissions; none found for either package.
• git diff --check passed.
• Ran the repository's actual createCatalog / parseReadme functions under Node with assertions: both translations parse, each new package appears exactly once per language, repository URLs/install commands/categories match, the resource count increases by exactly two, and all pre-existing resource records remain unchanged.
• All three distinct GitHub links in the new entries returned HTTP 200.
• Checked both published npm targets against the registry and confirmed their source repositories and Pi metadata; install commands also match the projects' current READMEs.
• Full bun run validate was not run. Dependency installation was interrupted on the resource-constrained ARM host; no full-suite or build success is claimed.

Tracking

Coordinated submission for:

• docs(discovery): submit pi-github-app-auth to Pi Index tonyputi/pi-github-app-auth#38
• docs(discovery): submit pi-lightpanda to Pi Index tonyputi/pi-lightpanda#13

Those issues should remain open until the listings have merged or are otherwise resolved. Opening this PR alone does not establish that the entries are published on Pi Index.