Launch-polish sprint: audit, demo, status, badges
A cluster of launch-polish items shipped together: - **Demo organization on first signup** — every new account lands in a pre-seeded "Demo · CheckUpstream" workspace alongside their real one, with two mock projects, real tracked services, and a guided four-step tour. - **Per-service embeddable badge** — `<script src="https://checkupstream.com/embed/badge.js?service=stripe"></script>` drops a live reliability pill anywhere. - **Platform status page** — /platform-status publishes CheckUpstream's own subsystem health, server-rendered against the same /api/health body external uptime monitors consume. - **Security + privacy hardening** — strict Content-Security-Policy, rate-limited discovery endpoints, `SECURITY.md`, `DATA_COLLECTION.md` engineer-facing technical reference linked from the privacy policy. - **k6 load-test suite** — nightly synthetic tripwire on MCP transport, ingest, and /api/health with SLO gates baked into the CI job. - **Continuous polling on every wired integration** — Vercel, Grafana, Datadog, Fly.io, and New Relic signals now flow into the correlator alongside status-page + community sources. - **Registry mining (deps.dev + GitHub velocity)** — LLM prompts and the `audit_dependencies` MCP tool now surface "is this library still alive?" alongside known CVEs.