feat: WhatsApp + LinkedIn integrations, SquareMCP rebrand, opencode docs

WhatsApp Business API (Meta Cloud API)
- New client: src/clients/whatsapp.ts
- Tools: whatsapp_send_message, whatsapp_send_template, whatsapp_list_templates
- REST endpoints: POST /api/whatsapp/send, POST /api/whatsapp/template, GET /api/whatsapp/templates
- Multi-account env var pattern: WHATSAPP_{ACCOUNT}_*

LinkedIn API (OpenID Connect)
- New client: src/clients/linkedin.ts
- Tools: linkedin_get_profile, linkedin_create_post, linkedin_search_connections, linkedin_send_message
- REST endpoints: GET /api/linkedin/profile, POST /api/linkedin/post, POST /api/linkedin/search-connections, POST /api/linkedin/message
- Multi-account env var pattern: LINKEDIN_{ACCOUNT}_*
- Uses /v2/userinfo (OpenID Connect) for profile reads

Domain migration
- hermes.fetcherpay.com -> hermes.squaremcp.com
- Updated K8s ingress, TLS cert, SERVER_URL env var
- Updated OPENCODE.md and opencode.json references

SquareMCP site
- Added logo assets (SVG, LinkedIn variants)
- Added terms.html
- Updated Dockerfile, nginx config, styles, index, privacy pages

Docs
- Added OPENCODE.md for opencode AI integration setup
- Updated .env.example with WhatsApp and LinkedIn credentials
- Added opencode.json to .gitignore (contains live API key)

Total tools: 19 (email 6, obsidian 5, whatsapp 4, linkedin 4)

src/index.ts

@@ -547,6 +547,82 @@ app.get('/api/obsidian/sync', requireAuth, async (_req, res) => {
   }
 });
 
+// ── WhatsApp Business API REST endpoints ──────────────────────────
+app.post('/api/whatsapp/send', requireAuth, async (req, res) => {
+  const { to, message, account } = req.body as Record<string, unknown>;
+  if (!to || !message) { res.status(400).json({ error: 'to and message are required' }); return; }
+  try {
+    const result = await handleToolCall('whatsapp_send_message', { to, message, account });
+    res.json(parseToolResult(result));
+  } catch (err) {
+    res.status(500).json({ error: (err as Error).message });
+  }
+});
+
+app.post('/api/whatsapp/template', requireAuth, async (req, res) => {
+  const { to, template_name, language, components, account } = req.body as Record<string, unknown>;
+  if (!to || !template_name) { res.status(400).json({ error: 'to and template_name are required' }); return; }
+  try {
+    const result = await handleToolCall('whatsapp_send_template', { to, template_name, language, components, account });
+    res.json(parseToolResult(result));
+  } catch (err) {
+    res.status(500).json({ error: (err as Error).message });
+  }
+});
+
+app.get('/api/whatsapp/templates', requireAuth, async (req, res) => {
+  const account = req.query.account as string | undefined;
+  try {
+    const result = await handleToolCall('whatsapp_list_templates', { account });
+    res.json(parseToolResult(result));
+  } catch (err) {
+    res.status(500).json({ error: (err as Error).message });
+  }
+});
+
+// ── LinkedIn REST endpoints ─────────────────────────────────────
+app.get('/api/linkedin/profile', requireAuth, async (req, res) => {
+  const account = req.query.account as string | undefined;
+  try {
+    const result = await handleToolCall('linkedin_get_profile', { account });
+    res.json(parseToolResult(result));
+  } catch (err) {
+    res.status(500).json({ error: (err as Error).message });
+  }
+});
+
+app.post('/api/linkedin/post', requireAuth, async (req, res) => {
+  const { text, visibility, account } = req.body as Record<string, unknown>;
+  if (!text) { res.status(400).json({ error: 'text is required' }); return; }
+  try {
+    const result = await handleToolCall('linkedin_create_post', { text, visibility, account });
+    res.json(parseToolResult(result));
+  } catch (err) {
+    res.status(500).json({ error: (err as Error).message });
+  }
+});
+
+app.post('/api/linkedin/search-connections', requireAuth, async (req, res) => {
+  const { keywords, account } = req.body as Record<string, unknown>;
+  try {
+    const result = await handleToolCall('linkedin_search_connections', { keywords, account });
+    res.json(parseToolResult(result));
+  } catch (err) {
+    res.status(500).json({ error: (err as Error).message });
+  }
+});
+
+app.post('/api/linkedin/message', requireAuth, async (req, res) => {
+  const { recipient_id, message, account } = req.body as Record<string, unknown>;
+  if (!recipient_id || !message) { res.status(400).json({ error: 'recipient_id and message are required' }); return; }
+  try {
+    const result = await handleToolCall('linkedin_send_message', { recipient_id, message, account });
+    res.json(parseToolResult(result));
+  } catch (err) {
+    res.status(500).json({ error: (err as Error).message });
+  }
+});
+
 app.post('/api/pilot-request', async (req, res) => {
   const origin = req.get('origin');
   if (origin && !SQUAREMCP_ALLOWED_ORIGINS.has(origin)) {