3ecb1fbfeb
- scripts/tag.sh: CalVer validation + dual-remote push - scripts/changelog.sh: prepend release entry to CHANGELOG - scripts/lint-public.sh: public IP, .env, and setup file checks - sync.sh: run lint before push - public/assets/: Mermaid diagrams for network topology, DNS chain, auth flow - CLAUDE.md: update current phase to Phase 3