PILOT-INTAKE-V1 (Manual Pilot Acquisition) & PILOT-INTAKE-ADMIN (Operations)

Release digest

PILOT-INTAKE-V1 (Manual Pilot Acquisition) — Added a hosted Security Readiness pilot intake form at the existing /security-readiness/#request-pilot section, backed by a bounded FastAPI endpoint, repository/service layer, and PostgreSQL migration for manual triage.
PILOT-INTAKE-ADMIN (Operations) — Added an authenticated admin listing endpoint that reuses the existing X-Admin-Token pattern for reviewing submitted pilot requests.

PUBLIC-PILOT-CTA-FLOW (Marketing) — Kept landing, pricing, Security Readiness, and public-docs CTAs pointed at the existing hosted intake section instead of making email the primary request path.
PILOT-PRIVACY-COPY (Privacy) — Updated the public Privacy Notice and Security Readiness docs to describe form-backed intake storage, retention, consent, non-PII analytics, and manually scoped commercial handling.

PILOT-INTAKE-RATE-LIMIT (Reliability) — Hardened the public pilot intake limiter to prefer edge-forwarded client addresses and clarified the hosted form fallback message when a network has submitted too many requests.

Added regression coverage for pilot intake submission validation, honeypot behavior, PII-minimized persistence, non-PII telemetry, admin-token access, public CTA routing, hosted form fields, confirmation copy, and hard-price copy removal.
Documentation decision: canonical architecture, public Privacy Notice, knowledge-base Security Readiness docs, and generated changelog surfaces are updated. No sitemap, llms.txt, SEO registry, auth, Stripe, subscription, customer portal, or gated-access documentation change is required because this slice is manual pilot acquisition only.
PILOT-INTAKE-API-DOCS (Public Docs) — Refreshed the generated API endpoint reference so the pilot intake submit endpoint and admin triage listing stay visible in the public API inventory.