v1.0.0

The first public release of the engine, under the MIT License.

Major Changes

• MIT License. LICENSE holds the MIT text and NOTICE the copyright and
  the trademark note. The four package files name MIT.
• Runtime client config: store identity, brand palette, locale pair, money
  and domains live in StoreSetting and are served on GET /v1/store/config.
  The storefront renders its tokens, locale routing and money formats from
  it at SSR; the admin renders its editors, money inputs and shell identity
  from it. No client branch, no build per client.
• The install stepper: ./setup.sh (Linux, macOS) and ./setup.ps1
  (Windows, local profile) run tools/setup, which asks for every
  store-specific value once, verifies storage, mail, bot protection and the
  optional search-engine integrations live, renders the compose stack, the
  nginx vhosts and the timers from deploy/templates/, builds the images on
  the box, installs the schema, the seeds and the owner account, issues TLS
  and probes the result. Profiles: engine, storefront, both, local.
• Payment providers behind one PaymentProvider interface and registry, with
  cod and manual reference providers and a Stripe example.
• Admin light mode, a semantic token layer, settings screens for identity,
  brand (with a palette preview and contrast report), localization, money
  and domains.
• A brandless tree, guarded by verify:no-client-refs on every push, and
  scenario fixtures (gulf-rtl, maghreb-ltr, demo) every locale, money
  and e2e matrix runs against.
• Deploy templates with no client value, an operator manual at
  deploy/README.md, a generic GitHub Actions pipeline with an install
  smoke job, secret scanning, and npm run release.
• Migration: 20261027120000_drop_license_rows deletes the license:*
RolePermission rows and the license StoreSetting rows left by
  pre-release installs. A setup answers file that still carries a license
  key warns once and the key is ignored.