Why I forked TensorChord’s VectorChord (vchord), vchord_bm25, and pg_tokenizer under pgsty—what our pre-release audit uncovered, what we fixed in vchord 1.2.0, and what it takes to keep an open-source supply chain running.