hackathon-submission-v1.4

Final verified ArcTask submission: judge-review fixes, server-side demo payout flow, safe API validation, browser persistence, committed package-lock, and CI API smoke coverage.