Time Tracker Phase 0 — foundation

Backend API is live. The single-page app is built in Phase 1.

• Health: /health open
• App config (public): /api/config open

GET /health      -> 200 { ok: true }
     GET /api/config  -> 200 { business_tz, policy }