Go-live checklist for a new site

TLS and passwords, roles, first controller, test grant, Telegram/webhook, clean security banner, and a board-local admin fallback.