CRM setup is not complete

Production access is blocked until authentication and persistence are configured. This protects workspace data while infrastructure and shadow-mode validation are completed.