main
CTA-PILOT-PREP-002: frozen blind run infrastructure (#90)
CTA-RELEASE-PREP-001: deterministic on-premise release skeleton (#93)
feat: add shared layer (settings, errors, db, llm, security, storage)
refactor: eliminate known structural technical debt (#79)