RingFenceHQ
Internal control plane — operators only.
HQ stores deployment metadata only — never client secrets or customer data.