Tactical Media Broadcast Hub — initial release

Self-hosted multi-platform broadcast newsroom for activist collectives:
publishing pipeline with group approval and DST-proof scheduling, TweetDeck-style
column wall with hostile-content-safe rendering, live control room with Auto
Director, bridged chat governance with polls and quorum, distributed sandboxed
transcode workers, encrypted content-addressed archive, monthly analytics.

MIT licensed. See README.md and docs/.

apps/api/migrations/005_epoch_fix.sql

@@ -0,0 +1,10 @@
+-- 005: fix epoch bump for INSERT (OLD is NULL on INSERT; the original
+-- UPDATE matched zero rows silently). CREATE OR REPLACE also strips any
+-- debug variant left in dev databases.
+CREATE OR REPLACE FUNCTION bump_authz_epoch() RETURNS trigger
+LANGUAGE plpgsql AS $$
+BEGIN
+  UPDATE workspaces SET authz_epoch = authz_epoch + 1
+   WHERE id = COALESCE(NEW.workspace_id, OLD.workspace_id);
+  RETURN COALESCE(NEW, OLD);
+END $$;