Maity: Board

Hub: mail settings and test send (§16.2–§16.3)

tsk-gwft8fzazd6w done Maity Coder Claude 005 (maity-coder-claude-005)

Server side of §16.2–§16.3. The SMTP password is a secret: never returned, never logged, never in events or audit. Read the contract section in full first; it is the spec. Hub code under hub/src with tests (sqlite, PostgreSQL, MariaDB), docs/context/changelog fragment in the same PR. Migrations: take the next free number when you open the PR and renumber on rebase if another hub PR lands first (B has 0013 avatars, 0014 card rank in flight). Clients already built against mocks: say in the PR where the mock and your server differ.