CWC Executive Hub

Scaffold / demo build. Sign-in is a shell here — production uses the proven HMAC-SHA256 signed session (whole-site gate, per-IP throttle, 30-day secure cookie). All figures below are placeholder data; live Tebra + camera data wire in after the BAA is signed.