EntryProof v1.0.0: EntryProof launches — free CPSC e-filing readiness checker

EntryProof's M0 build shipped at /cpsc-efile: a landing page, a free readiness checker, email capture, and the `pick2` Supabase schema (later renamed to `cpsc_efile` the same day to match the product's own build plan). Same-day security fixes closed an HMAC unsubscribe-token gap, a reflected-XSS issue, a missing scanId validation, and added per-email rate limiting on the checker.

The product also went through a naming reconciliation this day: it shipped internally as "SafeShip" before being renamed to EntryProof to match the plan, and its route moved from an earlier draft path to the current /cpsc-efile.

The M0 scope was deliberately narrow: a free readiness checker rather than a paid product, because EntryProof launched into a rule (16 CFR Part 1110) that had already been in effect since July 8, 2026, and the fastest way to find real demand was to let importers check their exposure for free before asking for a card. The `cpsc_efile.readiness_scans` and `cpsc_efile.email_captures` tables created this day are still the core data model the product runs on.