Cookie policy placeholder

This route is ready for session, analytics, and billing-related cookie disclosures.

Cookie policy draft pending

Supabase auth, future analytics, and Stripe checkout/callback behavior can all be documented here once live services are configured.