Build OVO Labs storefront and Porcelain conversion variant

[alexmwein]

Summary

• Adds OVO Labs Porcelain at /ovo-labs-porcelain/: Datum product-finding architecture with OVO typography, amber packaging, espresso controls, and a pure-white commerce canvas.
• Keeps the warm /ovo-labs/ storefront source unchanged for side-by-side comparison.
• Adds isolated search/cart/newsletter state, 25 route shells, responsive collection and PDP flows, and production-worker routing with branded deep 404 handling.
• Adds the Datum-vs-OVO decision memo, binding Fable 5 design contract, and release QA report.

Release evidence

• Fable 5 rendered verdict: SHIP.
• End-to-end QA: no open critical, high, medium, or low findings at 1440px, 390px, and 320px.
• Fuzzy search, URL-persistent filters/sort, PDP gallery/quantity, cart persistence, testing lookup, newsletter state, focus traps, reduced motion, 404, MIME, and security headers verified.

Verification

• node --check biologix-strategy-board/ovo-labs-porcelain/site.js
• node --check src/worker.js
• npm run build
• git diff --check
• Local Wrangler route and deep-404 canary

Public Sites deployment is intentionally not changed in this PR review pass.

[alexmwein]

Added: Biologix Control Tower — affiliate CRM

biologix-strategy-board/control-tower/ — a working operator tool for the affiliate desk, linked as view 08 from the board nav and footer.

Six tabs over four entities (affiliates, sales, outbound, payouts): dashboard, affiliates panel, pipeline board, onboarding gates, outbound list, money ledgers. Sortable on derived money columns, searchable, filterable, with a record drawer that creates and edits every entity. CSV import and export. Persists to localStorage.

Rules the tool enforces

• Commission with no rate set renders no rate set, never $0. No rate has been agreed with Biologix, and zero would read as "owed nothing" when the truth is "unknown".
• Every record needs one owner and one next action. Anything missing either, or marked live with incomplete gates or no code and link, surfaces in the dashboard defect list.
• Nine activation gates block launch in order.
• Multi-level override commission is modelled through an upline reference.
• Payouts reduce what is owed only once Sent or Cleared.

Verification

• crm-data.test.mjs — 32 assertions covering money math, MLM override, payout status gating, gate progress, defect and overdue detection, derived-column sorting, CSV round trip, cascade delete. All pass.
• Driven in a real browser across all six tabs: sorting, filtering, search, record create/edit, required-field rejection, gate toggle, stage move, CSV export and import, reload persistence, Escape-to-close.
• No page-level horizontal overflow at 390px on any tab.
• Two bugs found and fixed during verification: CSV round trip silently corrupted multi-select risk flags, and the ledgers sorted the Affiliate column by hidden id rather than name.

Single-user and browser-local. Export CSV is the only backup path until this moves to Postgres.