docs: full documentation review; move SECURITY.md to .github/ - #56

## Summary
- `UserProvider` no longer calls `getCurrentUserProfile()` on mount. It
fetches only after a component calls `useUser()`; that hook's effect
calls an internal `requestProfile()` (private
`UserProfileRequestContext`) which sets a `requested` flag. Repeat calls
are a React bail-out, so all consumers share one load.
- `useUser()` return shape (`userProfile`, `isLoading`, `error`,
`refreshUserProfile`) unchanged; `userGuid`/`isPending` gating
unchanged.
- Hooks kept as a documented extension point: updated
`contexts/README.md`, `contexts/user-provider.md`,
`contexts/session.md`, ADR-015. Deleted the resolved TODO
(`.claude/TODO/INDEX.md` left for the lead).

## Test plan
- [x] New tests: no consumer → no call; two consumers → one call;
late-mounting consumer triggers exactly one call
- [x] Existing 11 user-context tests still pass
- [x] `npm run lint`, `npm run typecheck`, `npx vitest run --coverage`
(2188 tests, thresholds met)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…llback (#59)

## Summary
- One read-only live `GET /tables?$search=Contacts` showed each entry's
keys are exactly `Name`, `AccessLevel`, `SpecialPermissions`, `Columns`.
There is no `Table_ID`, `Table_Name` or `Display_Name`.
- `FieldManagementService.getTableMetadata` matched on `t.Table_Name`,
which never hit, so it always fell back to `tables[0]`.
- `TableMetadata` now has `Name` + `Columns` + an index signature.
`getTableMetadata` does an exact, case-sensitive `Name` match and
returns `null` on a miss. `fetchPageFieldData` already handles `null`:
it merges no columns.
- Tests added: the exact match is not the first result; no exact match
returns null; a legacy `Table_Name` key is ignored; matching is
case-sensitive. Fixtures switched to `Name`.
- Docs updated: `field-management-service.md`,
`mp-provider/services/metadata.md`, GOTCHA-017. Deleted the TODO.

## Test plan
- [x] `npm run lint`
- [x] `npm run typecheck`
- [x] `npx vitest run`: 2187/2187 passed

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…te catalogs to mp-schema/ (#60)

## Summary
Fixes two TODOs: `2026-10-10-generated-zod-rejects-mp-datetimes` and
`2026-10-10-generators-write-old-doc-paths` (both deleted;
`.claude/TODO/INDEX.md` left for the lead).

**Zod datetimes**
- `mapDataTypeToZod` now emits, inline,
`z.string().regex(/^\d{4}-\d{2}-\d{2}[
T]\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:?\d{2})?$/, …)` for
`DateTime`/`Timestamp` instead of `z.string().datetime()`. It accepts MP
wall-clock (`toMpSqlDatetime` output) and ISO forms.
- `Date` columns use the same shape with the time part optional (MP
returns them as `YYYY-MM-DDT00:00:00`, which `z.string().date()`
rejected).
- Removed the temporary "known conflict" caveats from CLAUDE.md, README,
the `helper.ts` JSDoc and the reference docs. The README/helper examples
pass `schema: ContactLogSchema` again.

**Generator outputs**
- `generate-types.ts` writes `.claude/references/mp-schema/tables.md`
and `generate-storedprocs.ts` writes
`.claude/references/mp-schema/stored-procs.md`, both with their
frontmatter (`last_verified` = generation date).
- A `--search` run can't overwrite either catalog: types skips
`tables.md`, and storedprocs requires `-o` with `-s`.
- `models/index.ts` is built by scanning the output directory, so
`--search` no longer drops the other tables from the barrel.
- Dropped the `TableMetadataWithName` / `Name ?? Table_Name` workaround
and now use `table.Name`, following #59.

**Live regeneration** (`mp:generate:models` + `mp:generate:storedprocs`)
- Tables went from 301 to 307: 10 added (e.g. `_Deployment_Logs`,
`dp_Charts`, `dp_Communication_Messages_Archived`, `Wait_Stats_*`) and 4
removed (`vw_mp_Giving_Unit_Summary` replaced by `…_Standard`,
`Z_*_Notifications`).
- A few columns changed (e.g. `Congregations.Vanco_Signing_Key`
removed).
- Stored procs went from 532 to 539.
- No app code referenced anything that was removed.

## Test plan
- [x] New `generate-types.test.ts` / `generate-storedprocs.test.ts`
cover: accepted and rejected datetime/date strings (checked against real
Zod), the generated schema module, the barrel scan, and catalog
frontmatter
- [x] `npm run lint`
- [x] `npm run typecheck` (passes against the regenerated models)
- [x] `npx vitest run`: 120 files, 2237 tests passing

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

All five TODOs opened in the doc review were fixed in #57-#60; clear them
from .claude/TODO/INDEX.md (0 open). Point DECISIONS ADR-012 and the setup
wizard message at the new mp-schema/ catalog paths, and refresh the test
inventory (120 files / 2,237 cases) after the new generator, gate and
lazy-fetch tests.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>