SECURITY_ROOT now drives hotspot, GPS window, IA ACC guidance and offline structured chat
The PWA secure runtime now consumes SECURITY_ROOT for hotspot-only gating, GPS/fifteen-minute checks, IA ACC reminders and the offline-first typed secure message model, while preserving the existing chat front shell.