feat: real-data aggregation APIs + TOTP 2FA hardening + work screens (SCR-39~48)
- Aggregation packages: analytics/dashboard/ops/admin/catalog (+V13 indexes)
- TOTP 2FA: SecretCipher(AES-256-GCM), V12 migration, OTP enroll/challenge UI, OTP_ENFORCE env
- Common work screens SCR-39~48 wired to work/* contracts (gaps disabled+tooltip)
- M2 booth overlap check (BOOTH_OVERLAP, compliance-v1.1) + 8 unit test classes
- QA PASS (boundary cross-check), backend test + frontend tsc green
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
zio
16bfb238c1