Todo

• Pyramid key (now): verify Bar highway button → Echo decide → web complete on a test account.
• Wire UI fields: username, display_name, totp_enabled, pending challenge_id / app_key / expires_at.
• Harden Allow/Deny against expired challenges; discard grant_token on phone (api already strips).
• Confirm nested W/B/W 18px finder on phone mark vs live Bar (camera upright test).
• Document deep-link + Expo Go limits on Settings.
• Scrub any remaining “Ask Rue” / “Sign in to chat” strings in Expo chrome.
• Pair-only bind gating after website TOTP confirm.
• Confirm hubs using fleet-gate still land on Bar with highway available.

Placeholders welcome — stack fills as Ani lands.