Legal/policy: privacy, refund, recording, accessibility

[quinn-dougherty]

Description

Formalize the non-CoC policies so footer links resolve and forms can reference them. PLAYBOOK.md §10.

Deliverables

• Privacy policy: what we store (email, name, payment metadata); Stripe holds card data. Footer link.
• Refund policy: full refund ≥7 days pre-event, none after. Surfaced on `/register` and `/faq`.
• Recording policy: public by default, opt-out checkbox on `/submit`.
• Accessibility statement: captions on recordings (Whisper post-event), quiet-room channel.
• Sales-tax check with accountant before opening registration (Stripe tax config if needed).

Dependencies

• Domain/email (for policy contact).