Move Glama packaging into pkg/glama; drop redundant packaging/ dir

packaging/glama -> pkg/glama so all packaging lives under pkg/. Update the
_smoke.yml job command and the Dockerfile/comment references to the new path.
verify.sh is path-relative (dirname $0), so its logic is unchanged.

.github/workflows/_smoke.yml

@@ -203,7 +203,7 @@ jobs:
           scripts/security-network.sh ./codebase-memory-mcp
 
   # ── Glama directory check image (non-gating) ──────────────────────
-  # Builds packaging/glama/Dockerfile — the image Glama builds to score the
+  # Builds pkg/glama/Dockerfile — the image Glama builds to score the
   # server — and runs an MCP initialize + tools/list handshake to confirm the
   # containerized stdio server still starts and introspects. Guards the Glama
   # listing integration against drift (Dockerfile breakage, release-asset
@@ -219,4 +219,4 @@ jobs:
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Build Glama image and verify MCP introspection
-        run: bash packaging/glama/verify.sh
+        run: bash pkg/glama/verify.sh

pkg/glama/Dockerfile

@@ -3,7 +3,7 @@
 # codebase-memory-mcp needs NO Docker to run. This image exists only so Glama
 # can build a sandbox, launch the stdio MCP server, and run its introspection
 # checks, which power the directory's score badge. The same image is exercised
-# locally and in CI by packaging/glama/verify.sh to guard against drift.
+# locally and in CI by pkg/glama/verify.sh to guard against drift.
 #
 # We pull the "-portable" release asset, which is fully statically linked
 # (gcc -static) — unlike the standard asset, which dynamically links glibc/