refactor: centralny autoloader, Shared\Email i Shared\Security

- Utworzono autoload/autoloader.php (hybrydowy PSR-4 + legacy)
- Zmigrowano 7 entry pointów do centralnego autoloadera
- Dodano PSR-4 mapowanie w composer.json (Domain, Shared, Admin, Frontend)
- Utworzono Shared\Email\Email (PHPMailer, migracja z Helpers)
- Utworzono Shared\Security\CsrfToken (random_bytes + hash_equals)
- Wrappery w Helpers delegują do nowych klas
- Zaktualizowano docs/PROJECT_STRUCTURE.md
- Inicjalizacja PAUL (.paul/) z roadmapą 19 faz refaktoryzacji

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.paul/STATE.md

@@ -0,0 +1,64 @@
+# Project State
+
+## Project Reference
+
+See: .paul/PROJECT.md (updated 2026-04-04)
+
+**Core value:** Autorski system CMS umożliwiający zarządzanie treściami i stronami internetowymi.
+**Current focus:** Phase 2 complete — ready for Phase 3
+
+## Current Position
+
+Milestone: v0.1 Refaktoryzacja
+Phase: 2 of 19 (Shared: Email + Security) — Complete
+Plan: 02-01 complete
+Status: Loop closed, ready for next PLAN
+Last activity: 2026-04-04 — Phase 2 complete, UNIFY done
+
+Progress:
+- Milestone: [▓░░░░░░░░░] 10%
+
+## Loop Position
+
+Current loop state:
+```
+PLAN ──▶ APPLY ──▶ UNIFY
+  ✓        ✓        ✓     [Loop complete - ready for next PLAN]
+```
+
+## Performance Metrics
+
+**Velocity:**
+- Total plans completed: 2
+- Total execution time: ~18min
+
+**By Phase:**
+
+| Phase | Plans | Total Time | Avg/Plan |
+|-------|-------|------------|----------|
+| 01-infrastructure | 1/1 | ~10min | ~10min |
+| 02-shared-email-security | 1/1 | ~8min | ~8min |
+
+## Accumulated Context
+
+### Decisions
+- Centralny autoloader zamiast duplikatów
+- CsrfToken: single token per session (shopPRO pattern)
+- Email: PHPMailer require via __DIR__ absolute paths
+- Shared layer kompletny: Cache, Helpers, Html, Image, Tpl, Email, Security
+
+### Deferred Issues
+None.
+
+### Blockers/Concerns
+None.
+
+## Session Continuity
+
+Last session: 2026-04-04
+Stopped at: Phase 2 complete, loop closed
+Next action: Run /paul:plan for Phase 3 (Domain: Scontainers + Banners)
+Resume file: .paul/phases/02-shared-email-security/02-01-SUMMARY.md
+
+---
+*STATE.md — Updated after every significant action*