c3bcb4b99d
7 phases (A-G), ~25 tasks. Phase A-E build the new auth flow, audit model, endpoints, OWL service, and audit UI. Phase F is the entech rollout (manual, inline by main session per hybrid pattern). Phase G is the post-overlap cleanup (rip out tablet_tech_id, delete legacy endpoint, archive shopfloor service user). Bakes in 7 known gotchas from the permissions overhaul (rules 13c, 13i, 13k, 13m, 13d, AUDIT-1, always-push-to-main) so the implementer doesn't repeat them. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>