security: log only exception type (never secrets); generic client errors

UI: GritAI engineered/industrial design system (dark, grit-orange, Archivo+IBM Plex)

Deploy structured-extractor (30-in-15 #4)

initial commit