Badge identity mapping, session engine + app launch, MDM integration, BLE simulator, rate limiting, persistence hardening, docs