v1.0 MVP

Delivered: Multi-tenant API that generates Apple Wallet and Google Wallet student ID passes from a single API call.

Key accomplishments:
- Multi-tenant Fastify API with PostgreSQL RLS, AES-256-GCM credential encryption, Argon2 API key auth
- Abstract dual-platform theme system: JSON canonical positions translate to both Apple pass.json and Google PassObject
- Apple .pkpass PKCS#7 signing + Google Wallet JWT save links via direct REST API
- Full Apple PassKit Web Service (5 endpoints) + APNs push notifications
- Pass lifecycle: PATCH/DELETE with Google PATCH propagation + Google ECv2SigningOnly callbacks
- 258/258 tests green

See .planning/MILESTONES.md for full details.