Add Lingo World child safety and reporting controls

Reject untrusted browser origins at API boundary

Lock CORS to Mzansi Voice EAS origins

Secure Mzansi Voice beta API with Supabase ownership

Limit imported voice files to 90 seconds

Improve Afrikaans and Zulu voices and save generations

Harden voice profile lifecycle

Make profile actions responsive

Bound read-aloud generation time

Deploy voice cloning MVP runtime