Consent grants

Pros can only address you by name in co-branded emails after you grant permission. Revoke any grant below; it blocks new generations immediately. We keep the audit row (granted_at, revoked_at, reason) for compliance.