Security and SaaS readiness

The current stage is local/private beta. Public deployment still needs HTTPS, production secrets, backups, monitoring, and payment handling.

Every important business table must be scoped by tenant_id or a clear tenant relationship.

Backend role and feature checks protect actions; the frontend only improves usability.

SQLite is acceptable for small guided testing; public SaaS should prepare a PostgreSQL migration path.