Preserve deployed kiosk, TSN support, and recovery package

[ScriptsSandbox]

What changed

• preserves the deployed kiosk UI, confirmation flow, normalized Sheets backend, and ESP32 firmware
• accepts and validates 9-digit Triton Student Numbers alongside legacy PIDs and employee IDs
• resolves every active PID/TSN alias on one stable Person ID
• preserves the deployed normalized registration Apps Script and staff desk Apps Script
• captures the Pi's three live user services and Chromium launcher without credentials
• adds a fresh-Pi, ESP32, Apps Script, and data disaster-recovery runbook
• records institutional ownership, validation, and the live Pi deployment boundary

Recovery point

• Git tag: recovery-v1-2026-08-13
• Recovery source commit: e81d73c
• Pi currently deployed at: 242abcf
• Institutional Drive folder: Scripps Sandbox Web & Data Infrastructure/04 SOPs and Runbooks/Check-In Kiosk Recovery
• Dated production-database and waiver snapshots were created without moving or renaming the live files

Safety

• credentials, raw card values, private spreadsheet identifiers, and student data remain out of GitHub
• PID and TSN aliases never replace or rename a Person ID
• the crosswalk planner requires verification provenance and blocks conflicting ownership
• the live database was not moved; its remaining personal-ownership risk is documented for a controlled later migration
• snapshot copies are labeled DO NOT USE AS LIVE

Validation

• registration and staff Apps Script tests: 21 passed
• kiosk/data tests: 28 passed
• Pi tests: 2 passed
• production web build: passed
• launcher shell syntax and Git whitespace checks: passed
• Pi commit and enabled-service inventory verified remotely

The remaining institutional dependency is obtaining an authoritative UCSD PID/TSN mapping and scheduling a controlled move of the live database into shared-drive ownership after access testing.