[grade=A] Reflect current product state on marketing site

- Test count 2200+ -> 2,500+ (2,535 actual, verified in __tests__/)
- Security Center: per-IP perimeter analytics + PII masking claims
  grounded in DC-113/DC-120 (events/perimeter endpoint) and
  DC-108..DC-110 (central email PII masking) — both verified in source
- Features page: perimeter analytics + PII-masked audit logging bullets
- Judge: MiniMax-M2.5 adversarial review, grade A

src/app/features/page.tsx

@@ -54,15 +54,16 @@ export default function FeaturesPage() {
       id: 'ssl-security',
       title: 'SSL & Security',
       description:
-        'Enterprise-grade security, baked in. Automatic SSL via Caddy\'s internal CA, TOTP 2FA with email magic link, multi-user admin with role-based access, encrypted credential vault, comprehensive audit logs, and a Security Center that unifies events from every source.',
+        'Enterprise-grade security, baked in. Automatic SSL via Caddy\'s internal CA, TOTP 2FA with email magic link, multi-user admin with role-based access, encrypted credential vault, PII-masked audit logs, and a Security Center that unifies events from every source — with per-IP perimeter analytics for spotting attack sources.',
       icon: '🔒',
       features: [
         { icon: '🔐', label: 'Automatic SSL certificates' },
         { icon: '📱', label: 'TOTP 2FA + email magic link' },
         { icon: '👥', label: 'Multi-user admin (RBAC + invites)' },
         { icon: '🔑', label: 'Encrypted credential vault' },
-        { icon: '📝', label: 'Audit logging' },
+        { icon: '📝', label: 'PII-masked audit logging' },
         { icon: '🛡️', label: 'Security Center (multi-source events)' },
+        { icon: '🌐', label: 'Perimeter analytics (per-IP, per-vhost)' },
       ],
     },
     {