🚀 Production launch readiness (tracking)

Epic tracking the path from working MVP to launchable, production-grade company.

Launch shape (decided 2026-07-17): private beta first (real payments, small invited cohort), then public launch.
Priority: 🔴 beta-blocker = before ANY real user · 🟠 launch-window = during beta, before public launch · 🟡 = post-launch.

🔴 Tier 0 — beta blockers

• #43 — 🔴 Schema finalization & freeze (final additive migrations → hard freeze + CI guard) — first milestone
• #35 — 🔴 Security & auth hardening (+ CSP & rate limiting: confirmed missing)
• #36 — 🔴 Legal pages subset: /terms, /privacy, /refund-policy, /contact + cookie banner (blocks #38 — Razorpay live activation requires these pages)
• #37 — 🔴 Real content & brand
• #38 — 🔴 subset: live keys + refund.processed webhook (currently stubbed) + event-id dedupe fix + refund e2e
• Full GST invoice engine (pulled forward from #24 by founder decision): CGST/SGST/IGST split, SAC code, buyer GSTIN, InvoiceSeries gapless numbering, credit notes on refunds

🟠 Tier 1 — during beta, before public launch

• #38 — 🟠 rest: subscription lifecycle/dunning/cancellations (payouts stay manual)
• #39 — 🟠 Data, infra & reliability (+ Fermion webhook reconciliation job & outage runbook)
• #40 — 🟠 Product completeness & QA (+ add Playwright e2e to CI — currently absent)
• #36 — 🟠 rest: DPDP deletion/anonymization, consent capture, retention (hard enforcement May 2027; Consent Manager Nov 2026)
• #12 — 🟠 PostHog analytics (pulled forward — funnel must exist AT launch to measure it)
• #8 — 🟠 Referral codes (pulled forward)
• #41 — 🟠 subset: CI gates on prod deploys, support email, incident basics

🟡 Tier 2 — post-launch

• #41 — 🟡 rest of growth/ops
• All post-mvp issues (#1–#29) in existing v1/v2 order — schema audit confirms none require migrations

State: landing + dashboards + full restyle shipped to dev→prod (a245761). Dev-auth bypass is NODE_ENV-gated; complex mock seed lives on dev only.