fix: package page rendering and org access UX

[nepinhum]

Fix several issues found while testing organization package publishing locally:

• Avoid dangling cached home page pointers that could crash the app on refresh
• Add a GitHub OAuth app access review link on the package submit page for restricted orgs
• Render package creation errors back on the submit form instead of returning plain text
• Fix package repo/documentation links using literal $pkg.* template values
• Refetch README content when an empty cached README file exists
• Fix README sanitizer output duplicating HTML that starts with a tag

Tests

• v test .
• v .
• ./vpm

[nepinhum]

branch name wasn't supposed to be it, it's the old one. I hope it's still okay
and ci passes