Points to existing PROJECT/OPERATIONS/INSTALL/CHECKLIST docs rather than duplicating them, and surfaces the non-obvious bits: middleware ordering, auth flow, and the invariants that must not be broken silently.
