Prevent published drafts and lost SEO by using low‑privilege auth, mapping SEO fields, defaulting to drafts and requiring editor approval for all inbound