Orrery — Control Plane

Service-role-holding code only — no operator UI here yet (that's item 12's job). Currently holds one route: POST /webhooks/clerk (GTM item 2 design, issue #18).