The control plane, in git and versioned

The first public increment: a real, durable management API.

• /v1 management API over a PostgreSQL executor covering orgs, memberships, projects, environments, operations, and audit.
• OIDC token introspection with authorization loaded from forced-RLS membership state — token metadata is never trusted for authorization.
• Ordered, checksummed, lock-guarded, idempotent migration runner. 0001 freezes.
• ORION_*/SCRIBASE_* configuration only; the API process never holds the operator or schema-migrator credential.