REST API, MCP server, webhooks, and three support tool integrations

A lot shipped today.

REST API (Growth+): Nine read-only endpoints under `/api/v1/` — items, patterns, people, snapshots, and briefing. Bearer token auth. 1,000 req/hr on Growth, 10,000 on Scale. Tokens are SHA-256 hashed at rest; plaintext is shown once on creation.

MCP server (Growth+): JSON-RPC 2.0 at `/api/mcp`. Nine read-only tools. Connect it to Claude, Cursor, or any MCP-compatible tool and ask questions about your feedback data. We don't build a chat interface — your AI tool does that better.

Outbound webhooks (Growth+): Register endpoints to receive `item.created`, `item.published`, `pattern.updated`, and `snapshot.created` events. HMAC-SHA256 signed. Retry schedule: 30s → 5min → 1hr → fail.

Support tools: Slack, Intercom, HelpScout, and Plain now send conversations directly into the Pot via webhook. All four enforce the thread model — a 20-message support conversation is still one item.

Custom domain (Scale): Point a CNAME at `cname.vercel-dns.com` and serve your public insights page from your own domain. DNS verification runs every 30 minutes.