Static Reviewer Demo

Sanitized proof approval walkthrough. This route does not create accounts, call Supabase, trigger OAuth, or mutate production data.