7 secrets: form key, store key, alert token, FRED key, lead + alert webhooks, analytics ID. Generated fresh per client. SIGMA law: never typed, never shared, never reused.
16 asset targets: filled from the 6 upload slots above. Skipped slots ship a themed monogram; responsive hero variants are derived at fulfillment.