Stage 01 establishes secure auth, role and scope authorization, core schema, and an admin-ready app shell.