Bone Flow Calendar License Server - pcsr.net v1.0.11 PRIVATE
===========================================================
Paired client: Bone Flow Calendar Standard 1.0.19
Production base: https://pcsr.net/boneflow/license/calendar/

SECURITY CHANGE FROM v1.0.9
- Private signing key, admin-key hash and activation-token store are NO LONGER under /var/www/html.
- Private runtime directory: /var/www/boneflow-license-private/calendar/
- Public PHP only: /var/www/html/boneflow/license/calendar/

Public endpoints:
  https://pcsr.net/boneflow/license/calendar/health.php
  https://pcsr.net/boneflow/license/calendar/issue.php
  https://pcsr.net/boneflow/license/calendar/deactivate.php
  https://pcsr.net/boneflow/license/calendar/admin/

Local customer origin allowed:
  http://localhost:5000

IMPORTANT UPGRADE RULE
If v1.0.9 is already live, preserve the LIVE activation-tokens.php before replacing anything.
MIGRATE-v1.0.9-to-v1.0.11.sh copies the live key/admin/token state to the secure outside-webroot directory.
Do not distribute this PRIVATE ZIP to customers.
