For Training

Nothing to train end users on

This PR adds no clinic-facing feature and no workflow change. There is nothing here to include in clinic staff, doctor, or patient training materials.

For engineers picking up WT-1

If you're the one picking up the follow-on epic (WT-1 / XLZ-556), the "training" here is really an onboarding note about what this foundation branch gives you:

1. packages/watchtower-server/index.js is a placeholder — replace it

with the real Apollo + Express service (GraphQL + REST edge). Keep the /health route behavior (plain text ok, 200) since the sandbox container healthcheck depends on it.

1. packages/watchtower-web/public/index.html is a placeholder — replace

it with the real web client. Note it has no package.json yet, so you'll need to add one (and register it properly) once there's an actual build to run.

1. The sandbox already knows how to detect and run packages/watchtower-*

and will surface a WATCHTOWER_URL row in PR deploy comments — you don't need to touch sandbox/CI plumbing to get a preview environment for your branch, per the PR description.

1. Sign-in and RBAC/2FA/audit are not implemented anywhere in this branch —

don't assume any auth scaffolding exists to build on top of.

See Sandbox Smoke-Test Scaffold for exact file and line references.