Conventions

The dominant pattern is fat handlers — handlers access MongoDB directly without repo abstraction. One clean-architecture island in internal/service for the CS rotator. Per-tenant file naming with suffixes.