QR-triggered messages, with guardrails.

Staff and admins manage students, guardians, templates, and QR tokens. Public triggers stay opaque and never expose student details.