Phase 1 focuses on a clean, premium frontend for multi-site client portals and a hardened admin area restricted to `omni.octexa.com`.