Fix MICR font path, date import, PDF button bug; clean up config; add TODO markers

- Hardcode GnuMICR.otf path in pdfService.js; remove MICR_FONT_PATH env var
- Fix normalizeDate to handle MM/DD/YY (2-digit year) and return null on no match
- Fix generatePdf button DOM bug: update span directly instead of overwriting textContent
- Remove .env.example and NTFY_URL from docker-compose (app has no required config)
- Remove redundant fonts volume mount from docker-compose (fonts bundled in image)
- Mark MVP TODO items complete; add // TODO comments in source for post-MVP features
- Update README: correct slot height, remove stale env var docs

src/app.js

@@ -87,6 +87,12 @@ app.post('/api/account/setup', (req, res) => {
   res.status(201).json({ success: true });
 });
 
+// TODO: Add multi-account support -- account switcher, per-account routing/logo/layout, account_id FK on checks and layout_fields
+
+// TODO: Add basic auth or simple password gate for any network-exposed deployment
+
+// TODO: Add deposit slip support -- deposits table, PDF generation, ledger, and slide-in entry form
+
 // Account info endpoint (read-only for Phase 1)
 app.get('/api/account', (req, res) => {
   const db = require('./db/database');