self-host-guide

Stand up your OWN capx chokepoint — the self-hostable image that holds the token vault and runs the guard at send. Walks the real needs from the repo; never fabricates commands.