Implement NetKingdom identity shell for coulomb.social (CSOC-WP-0002)

Django scaffold aligned with the business delivery lane: tenant-keyed
Member model without passwords, identity app as sole OIDC/session
boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and
tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP,
flex-auth, and packaging remain open.

README.md

@@ -1,37 +1,42 @@
 # coulomb-social
 
-Reimplementation of the **coulomb.social** co-creation platform on the
-Railiance / NetKingdom / HelixForge stack — exiting the stalled bubble.io
-low-code product.
+Reimplementation of **coulomb.social** on Railiance / NetKingdom / HelixForge —
+exiting the stalled bubble.io product.
+
+**Current focus:** NetKingdom user management and authenticated shell
+(`CSOC-WP-0002`). Bubble content claim is deferred.
+
+## Quick start
+
+```bash
+uv sync
+uv run manage.py migrate
+make run          # http://127.0.0.1:8008
+make test
+```
+
+With `DEBUG` and `OIDC_ENABLED=false` (defaults), **Sign in** uses a local
+dev-claims form. Platform OIDC: set env vars in `docs/dev.md`.
 
 ## Orientation
 
 | Doc | Role |
 |-----|------|
-| [`INTENT.md`](INTENT.md) | Why this repo exists and what success means |
-| [`SCOPE.md`](SCOPE.md) | In/out boundaries and when to use this repo |
-| [`GOAL.md`](GOAL.md) | Bootstrap note that started this setup |
-| [`LICENSE`](LICENSE) | Target Revenue Source License (TRSL V1C1) |
-| [`AGENTS.md`](AGENTS.md) | Agent / State Hub session protocol |
-| [`workplans/`](workplans/) | Active work (`CSOC-WP-*`) |
+| [`INTENT.md`](INTENT.md) | Why this repo exists |
+| [`SCOPE.md`](SCOPE.md) | In/out boundaries |
+| [`docs/adr/ADR-0001-netkingdom-identity.md`](docs/adr/ADR-0001-netkingdom-identity.md) | Identity architecture |
+| [`docs/dev.md`](docs/dev.md) | Local development |
+| [`docs/identity/`](docs/identity/) | OIDC / user-engine bindings |
+| [`workplans/`](workplans/) | `CSOC-WP-*` |
+| [`docs/design-extract/`](docs/design-extract/) | Captured visual language |
 
-## Platform shape
+## Stack
 
-Standalone business application (not a Core Hub extension):
-
-- own database, tenant-keyed from migration one
-- app-local member accounts (OIDC switch later)
-- commit-SHA images → `gitea.coulomb.social/coulomb/coulomb-social`
-- release values in `railiance-apps` → railiance01
-
-Contract: business-app service contract v0.1 in `the-custodian`.
-
-## Status
-
-Bootstrap. Application code not yet scaffolded. First workstream is the
-bubble.io exit assessment (`CSOC-WP-0001`).
+- Python 3.12 · Django 5.2 · SQLite (dev) / Postgres (prod URL)
+- Auth boundary: `coulomb_social.apps.identity` (OIDC/PKCE + session)
+- Members: tenant-keyed, no password columns
+- Design tokens reference: primary `#d08728` (from live extract)
 
 ## License
 
-Target Revenue Source License (TRSL), Version 1 Candidate 1. See [`LICENSE`](LICENSE).
-No Phase Manifest is declared yet.
+Target Revenue Source License (TRSL V1C1). See [`LICENSE`](LICENSE).