Per‑user deposit addresses (XPUB via Tatum) • Off‑chain transfers • Admin approvals • Shared‑hosting ready