Epic 3: Content model, admin editing, snapshot resilience

Editable without a rebuild: the full schema with atomic mutation helpers, seed from content.json, JWT admin with CRUD for everything, shared markdown sanitisation, snapshot-to-disk resilience, and the first widget (Currently).

Done when editing any field appears live with no deploy and /cv renders with Postgres stopped.