Designing the wp-central contract

This post captures the early central-origin contract: Sentinel owns ingress, operators use standard WordPress admin, and integrations authenticate with dedicated application passwords.