Implement NetKingdom identity shell for coulomb.social (CSOC-WP-0002)

Django scaffold aligned with the business delivery lane: tenant-keyed
Member model without passwords, identity app as sole OIDC/session
boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and
tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP,
flex-auth, and packaging remain open.

Makefile

@@ -0,0 +1,25 @@
+.PHONY: help sync migrate run test lint shell
+
+.DEFAULT_GOAL := help
+
+help: ## List targets
+	@grep -E '^[a-zA-Z_-]+:.*?## ' $(MAKEFILE_LIST) | \
+		awk 'BEGIN {FS = ":.*?## "}; {printf "  \033[36m%-12s\033[0m %s\n", $$1, $$2}'
+
+sync: ## Install Python deps with uv
+	uv sync
+
+migrate: ## Apply migrations
+	uv run manage.py migrate
+
+run: ## Dev server on :8008
+	uv run manage.py runserver 0.0.0.0:8008
+
+test: ## pytest
+	uv run pytest
+
+lint: ## ruff
+	uv run ruff check .
+
+shell: ## Django shell
+	uv run manage.py shell