feat: IMAP mail sync with thread-to-contact matching (PRD §6.1)

Real IMAP connection via imapflow library:
- Connects to IMAP server (IMAPFlow, TLS on port 993)
- Fetches recent messages (configurable limit, default 20)
- Extracts: from, fromEmail, subject, date, snippet (200 chars)
- Thread-to-contact matching (PRD §6.1):
  1. Match sender email against persons table
  2. If no person match, extract domain and match against company.website
  3. Returns matchedCompany + matchedPerson for each email
- Audit-logged (action: crm.mailsync:imap)
- Zod validated (host, port, user, password, folder, limit)
- 502 on IMAP connection failure with detail
- 400 on validation failure

Tested: invalid creds → 502 'IMAP connection failed', missing host → 400

skills/design/design-templates/ppt/ib-pitch-book/references/conventions.md

@@ -0,0 +1,36 @@
+# Investment-banking pitch book — layout conventions
+
+Use as a self-check before finishing **`index.html`**.
+
+## Every slide
+
+- **Masthead**: advisory bank name + project codename + section label + page x/y.
+- **Confidentiality**: visible treatment ("Strictly Confidential — Discussion
+  Materials" or firm-standard ribbon).
+- **Footer**: page fraction, optional run id / skill trace for internal QA.
+
+## Tables
+
+- Financial figures use **tabular numerals** (monospace or `font-feature-settings: "tnum"`).
+- Multiples use **×** (not `x`) where appropriate.
+- **Median / mean** summary rows differ visually from data rows (italic or tint).
+- **Subject company** row highlighted consistently.
+
+## Football field
+
+- Shared horizontal axis across methodologies; **current price** as vertical tick.
+- Range labels right-aligned; methodology labels left.
+
+## DCF sensitivity
+
+- Highlight **base case** cell (WACC × terminal growth).
+- State rounding rules in a foot line.
+
+## Strategic alternatives matrix
+
+- Four options; **recommended** option uses inverted emphasis (e.g. dark fill).
+- Each cell: headline, indicative value band, **for / against** bullets.
+
+## Disclaimer slide
+
+- Prepared for whom, sources, limitations, no reliance for transaction decisions.