Lucas Berger
0b074cd568
Live spike against me@lucasberger.ca: one app password enumerated both account calendars (PROPFIND), and a REPORT fetched + cached 503 real events into MariaDB with correct D-13 timed/all-day handling (CAL-01). Per-member app-password model (D-09) validated; no cross-account ACL needed; no fallback required. Gate 2 (live Authelia/Pangolin login + SSE smoke test) remains pending operator action.