Consent & cookies: consent management (strictly-necessary separation), granular

opt-in/out propagated to all tags/systems, marketing suppression, age/parental rules where relevant, and records of consent.