Epic: Keep brand families isolated (no CompleteTech text in other orgs) #35

Goal

The Pick Your AI rollout showed several places where CompleteTech names, colours and legal wording leaked into another organization's output. PR #20 fixes the Pick Your AI case; this epic removes the underlying causes.

Exit criteria

• No output for a non-CompleteTech org contains CompleteTech names, colours or legal wording unless configured.
• A generic leak test covers every org row.
• Footer checks agree with doctor.

Scope

• E2.1: The README template writes trademark and copyright claims on an organization's behalf
• E2.2: Co-owned org rows are still filed under the completetech family (latent leak)
• E2.3: footer --check README.md ignores an org's footer: false unless --org is passed
• E2.4: footer --check --online fails: both footer logo URLs return 404

Progress is tracked through this issue's sub-issues.

Prior work

Prior work: open PR #20 (opt-in --allow-t3 and the Pick Your AI family), open #7 and PR #13 (variant J badges), merged PRs #14 to #19 (icon art-direction path, UTF-8 output, registry-free org health and label planning, Windows test portability, footer URL repair) and closed issues #8 to #12. Nothing here duplicates those; where an item is already handled it is linked, not refiled.

Fresh VM verification: not run. Findings were verified on a Windows host; hosted CI is separate evidence.