feat: add real Privacy Policy and Terms of Service pages

Needed to unblock Google OAuth consent-screen branding (the field was
still pointing at Snehalata's URLs, reused from that project). Genuine
content, not boilerplate — covers the contact form, analytics tools
just installed, and Google Sign-In's basic-profile-only scope. Linked
from the footer, which had no legal links at all before.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/app.jsx

@@ -119,6 +119,14 @@ function App() {
         title: `Our Products — ${BASE}`,
         desc: 'GlamourTouch — Aura\'s own live e-commerce store in beauty & lifestyle. A real, production product built on our stack. See exactly what we ship for clients.',
       },
+      privacy: {
+        title: `Privacy Policy — ${BASE}`,
+        desc: 'What Aura Agentic AI collects, how it\'s used, and how to ask us to delete it.',
+      },
+      terms: {
+        title: `Terms of Service — ${BASE}`,
+        desc: 'Terms for Aura Agentic AI project engagements and client dashboard access.',
+      },
       ...SERVICE_IDS,
     };
 
@@ -180,6 +188,10 @@ function App() {
         return <T.BlogPage />;
       case 'case-studies':
         return <T.CaseStudiesPage />;
+      case 'privacy':
+        return <T.PrivacyPage />;
+      case 'terms':
+        return <T.TermsPage />;
       default:
         return (
           <main style={density === "compact" ? { fontSize: 14.5 } : undefined}>