/* * kitos-tokens.css — KS#002 kitOS Design Codex tokens + SSO auth-surface zone * overrides. Source: design/KS#002-kitos-codex.md (SP 633wzp, G3 ruling). * * Linked in base.html AFTER the per-tenant brand