Promotes five commits so loghq can send email.
The mailbox noreply@loghq.org and its DNS are already live, provisioned directly. What is missing is the credential: the running app's shared/.env has no MAIL_PASSWORD key at all, so until this deploys, SMTP auth still fails exactly as before.
cb38767creates the mailbox and stores its password encrypted- the other four are the stx rule 8 gate and e2e isolation work already on main