Privacy, export, 2FA, Linked Roles

Players keep control on https://navcom.ai/account: - Discover by Discord/RSI: off by default. RPs cannot reverse-lookup Discord from an RSI handle unless this is on and they hold rsi+discord. - Download my data: ZIP of account fields (no hashed passwords, no live OAuth tokens). - Authenticator 2FA: optional TOTP. Required after email/password or email-code login once enabled. - Authorized apps: per-RP consent revoke. Discord Linked Roles (https://navcom.ai/verify) publish metadata verified (boolean), enlisted (datetime), org_rank (integer). Discord has no string SID field — org membership remains NAVCOM-Bot roles. SENTRY is the public encyclopedia. Use GET https://sentry.wildknightsquadron.com/api/v1/citizens/{handle}/profile/avatar_url for avatars, or GET /oauth/v1/citizens/{handle}/avatar (public, no token, rate limited).