- Add SOPS-encrypted tailscale-operator-authkey secret for operator auth - Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000) - Enable trade-dashboard TsProxy (was waiting for operator install)
- FastAPI app with async SQLAlchemy + Alembic migrations - API: positions CRUD, PnL summary, trade history, webhook endpoint - Dark-themed SPA frontend (vanilla HTML/JS) - K8s: deployment, service, configmap, TsProxy for Tailscale access - Backed by hermes-pgdb / trading_data database - Wired into Flux staging pipeline