Sanitize public source — move names+ceilings to env, anonymize fixtures

Initial: capacity dashboard v2 — leg-aware engine + Notion sync + password gate