Stood up most of the wedding vertical in one go: guest/RSVP model with a per-guest signed token, a SiteConfig password gate, coordination tables (Task/Helper/HelperAssignment), and the public + admin HTTP routes to drive them. Added a vendor-reply resolver on the wedding API so tokened vendor emails land as inbox rows the negotiator can resume on, with DMARC and prompt-injection treated as audited signals rather than hard drops. Also tightened a few cross-cutting things while in there: tenant-scoped getProject, shell-empty env vars as the "disable this capability" signal, a job-id idempotency key on comms.send, and a multi-currency-ish job queue path for smaller stateless tasks. Commit messages said "wip, loads of features" and for once that was accurate.

4 commits across 1 repo (belo-works: 4). 139 files changed; 2 skipped. Diff was truncated for summarization.