Foundation features

Protected adult and student shells, server-only provider boundaries, strict environment validation, and no pre-created family records.