server: replace global CSRF allowlist with per-route posture helpers
mnw-cli: UX audit fixes + project create endpoint
Add git access provisioning, mnw-cli features, internal API endpoints
Restructure into monorepo