Weekly Presidential Actions Worker

POST /run  { "weekEnding": "YYYY-MM-DD" }  (optional secret header x-run-secret)
POST /run-reflection  { "month": "YYYY-MM" }  (optional secret header x-run-secret)
GET  /health
GET  /admin  (password-protected dashboard)
GET  /admin/run-status?instanceId=...  (authenticated)

Cron: Friday 7pm America/New_York (weekly)
Cron: 1st of month 7pm America/New_York (prior-month reflection)