Safety Evidence

• cleanup_enabled default is false.
• No docm_scheduled_cleanup action is scheduled until cleanup is enabled.
• Cleanup preview and dry-run paths work before destructive execution.
• Generated demo orders are marked as test data and can be deleted after testing.
• Packaged ZIP excludes node_modules, tests, source resources, and dev manifests.