J.3 Storage, backup, accounts & data sent to AI

What it does

• Data store with write locks, atomic writes and 20 automatic backups; every upgrade has a dry-run migration, a backup and a rollback. The data folder is blocked from the web; files open only through permission-checked pages.
• Registration with a company e-mail and approval; passwords ≥ 25 characters, Argon2id, lock-out on guessing; client accounts see only the projects they are invited to.
• The AI API key is encrypted with AES-256-GCM and never returned to the browser; only label templates (and component descriptions, if allowed) are sent; machine translations must be reviewed and approved.