Add brand identity: Origin logo + monogram icon, palette, generator

Signed-off-by: Justin Paul <justin@jpaul.me>

CLAUDE.md

@@ -68,6 +68,17 @@ Don't get ahead of the phases. GEDCOM lands before the assistant (so AI writes t
 
 Provenance is **source-available** under **BUSL-1.1** (see [LICENSE](LICENSE)): free for personal/family/non-commercial use, no third-party commercial hosting, and each release converts to **AGPL-3.0** four years after it ships. The DCO sign-off keeps the licensing chain clean so the maintainer can manage that conversion and a possible future hosted offering. Don't add code under an incompatible license, and don't vendor dependencies whose licenses conflict with eventual AGPL distribution.
 
+## Brand
+
+Visual identity lives in [docs/brand/](docs/brand/) (see its README for full guidance). Use these as the frontend's design tokens:
+
+- **Ink** (primary text/marks): `#1A1A17` light / `#F2EEE6` dark
+- **Bronze** (accent, constant): `#A06A42`
+- **Paper** (knockout on bronze, constant): `#F7F3EC`
+- **Muted** (secondary text): `#6B6862` light / `#9A968E` dark
+
+Wordmark is a serif (heritage register); UI body/secondary text is a humanist sans. Logo lockup: `docs/brand/provenance-logo.svg`; app icon/favicon: `docs/brand/provenance-icon.svg` and `favicon.svg`. Don't recolor outside the palette or add gradients/shadows — the look is flat and warm.
+
 ## Owner & contact
 
 Maintainer: **Justin Paul** (`justin@jpaul.io`). This deployment targets a home lab: Authentik at `auth.jpaul.io` for auth, `mail.jpaul.io` for SMTP, behind Caddy + Cloudflare Tunnel.