CTD Cohort 4 Leaderboard

API is live. Board and control panel HTML arrive later.

• GET /api/state — public read
• POST /api/report — reporter agents (bearer)
• POST /api/override — control panel (bearer)
• GET /api/replay — Sunday time-lapse data