Prompt 01 complete

Foundation & data model ready

Database schema, row-level security, TypeScript types, vocabulary constants, and seed data are in place. UI, auth, and call handling arrive in the next prompt.