feat(v4.0): GitHub routes + CSRF exemptions for share/publish

- app/routers/github_routes.py: /api/github/status + disconnect
- CSRF: ajout /api/github, /api/pages, /api/recents aux exclusions
- main.py: registration github_router

app/templates/base.html

@@ -281,6 +281,29 @@
       </div>
     </div>
 
+    <!-- Published -->
+    <div class="sidebar-section">
+      <div class="sidebar-section-header" @click="toggleSection('published')">
+        <div class="sidebar-section-title">
+          <span class="chevron" :class="{ open: sectionsOpen.published }" x-text="sectionsOpen.published ? '▼' : '▶'"></span>
+          <span>Published</span>
+        </div>
+        <div class="sidebar-section-actions">
+          <a href="/library?tab=Published" class="library-link-btn" title="View in Library" @click.stop>→ Library</a>
+        </div>
+      </div>
+      <div class="sidebar-section-items" x-show="sectionsOpen.published" x-transition>
+        <ul class="sidebar-items" data-section="published">
+          {% for page in published_pages %}
+            {{ render_tree_item(page) }}
+          {% endfor %}
+          {% if not published_pages %}
+          <li class="sidebar-item empty-hint"><span class="page-icon">🌐</span><span class="page-name text-dim">No published pages</span></li>
+          {% endif %}
+        </ul>
+      </div>
+    </div>
+
     <!-- Private -->
     {% if auth_method != 'local' or '/' in workspace_key %}
     <div class="sidebar-section">
@@ -628,7 +651,7 @@
 
       // ── Sections collapsible ──
       sectionsOpen: (function() {
-        var def = { recents: true, private: true, meetings: true, favorites: true, agents: true, shared: true, apps: true, workspace: true };
+        var def = { recents: true, private: true, meetings: true, favorites: true, agents: true, shared: true, published: true, apps: true, workspace: true };
         try {
           var saved = JSON.parse(localStorage.getItem('fd_sections') || '{}');
           return Object.assign(def, saved);