Post-quantum cryptography migration: finalized NIST standards, hard deadlines, and runbooks that survive contact. Dated, sourced, re-checked against primary documents.