The project ref from its Supabase URL. Wires reach later.
The hook the onboarding ladder hangs on for gated deploys.
This creates the project, opens session 1, and registers it read-only. No credentials are added — arming is a separate, gated step.
Bring a project into the Factory. It enters known and read-only — scored against the framework, reasoned about by the Orchestrator, but never armed. Giving it the power to deploy or write comes later, deliberately, through the gate.