servicepack v1.2.17 — the framework's own furniture is opt-out by default

No code change.

The update rsyncs the framework tree over the downstream's, so a file the
framework ships and the downstream lacks is ADDED. Fine for a baseline you
diverge from; wrong for the files that publish, fund and document servicepack
itself. mirror-and-archive.yml is the sharp one: it force-pushes the repo to
public GitLab and Codeberg and archives it. servicepack is public, a downstream
need not be, and a private project inheriting it would publish itself on the
next tag.

Ignored by default now: mirror-and-archive.yml, issue-pull.yml, pipeline.yml,
.github/FUNDING.yml, .agents, .gitleaks.toml, .dockerignore.

.servicepackupdateignore is excluded from the sync, so an EXISTING project does
not receive these automatically -- copy the lines across by hand. The README
tabulates them.