Add SpecAssay bundle to community catalog (#4125)

Adds specassay v0.3.4 to bundles/catalog.community.json and
docs/community/bundles.md.

Validation results:
- Bundle ID matches ^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$: pass
- Version 0.3.4 is valid semver X.Y.Z: pass
- Repository https://github.com/rdryfoos/specassay is a public GitHub repo
  containing bundle.yml, README.md, and LICENSE: pass
- bundle.yml fields match submission (id, name, version, role, author,
  license, speckit_version, provides 1 extension + 1 preset): pass
- README documents role, components, required catalogs, and install steps: pass
- Download URL is a valid HTTPS GitHub release asset under the submitted repo: pass
- Release v0.3.4 exists and specassay-0.3.4.zip is attached: pass
- Catalog entry fields match submission and manifest; verified=false: pass
- Tags are 2-5 lowercase strings: pass (5 tags)
- Required catalogs documented (extensions + presets); README includes
  catalog add commands and testing details confirm catalog registration: pass
- All checklist items checked: pass

Closes #4059
cc @rdryfoos

Assisted-by: GitHub Copilot (model: claude-sonnet-4.6, autonomous)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

bundles/catalog.community.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1.0",
-  "updated_at": "2026-07-22T00:00:00Z",
+  "updated_at": "2026-08-14T00:00:00Z",
   "catalog_url": "https://raw.githubusercontent.com/github/spec-kit/main/bundles/catalog.community.json",
   "bundles": {
     "sicario-spec": {
@@ -30,6 +30,28 @@
         "threat-modeling"
       ],
       "verified": false
+    },
+    "specassay": {
+      "name": "SpecAssay",
+      "id": "specassay",
+      "version": "0.3.4",
+      "role": "developer",
+      "description": "Durable-ID promotion for stock Spec Kit: templates, Gate 2 refusal, and trace-manifest emission.",
+      "author": "Rik Dryfoos",
+      "license": "MIT",
+      "download_url": "https://github.com/rdryfoos/specassay/releases/download/v0.3.4/specassay-0.3.4.zip",
+      "repository": "https://github.com/rdryfoos/specassay",
+      "requires": {
+        "speckit_version": ">=0.14.0"
+      },
+      "provides": {
+        "extensions": 1,
+        "presets": 1,
+        "steps": 0,
+        "workflows": 0
+      },
+      "tags": ["traceability", "governance", "durable-ids", "gate", "sdd"],
+      "verified": false
     }
   }
 }

docs/community/bundles.md

@@ -10,6 +10,7 @@ Accepted community bundle entries are published in [`bundles/catalog.community.j
 | Bundle | Purpose | Role or team | Provides | Required catalogs | URL |
 |--------|---------|--------------|----------|-------------------|-----|
 | SicarioSpec Security & Governance Bundle | Secure-by-default governance bundle for GitHub Spec Kit. Enforces data classification, threat modeling, and code-owned verification gates. | `security-engineer` | 1 extension, 11 presets | Documented | [sicario-spec](https://github.com/dfirs1car1o/sicario-spec) |
+| SpecAssay | Durable-ID promotion for stock Spec Kit: templates, Gate 2 refusal, and trace-manifest emission. | `developer` | 1 extension, 1 preset | Documented | [specassay](https://github.com/rdryfoos/specassay) |
 
 ## What to Submit