Session log: GuruRMM MSI build fix + DESIGN.md + BirthBiologic onboarding

- Fixed MSI build on Pluto (missing WixToolset.Util.wixext in install.rs)
- Created docs/DESIGN.md in gururmm repo (per-component design guide)
- Saved BirthBiologic GuruRMM site credentials to vault
- Added birth-biologic and mvan-inc client session logs

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

clients/birth-biologic/session-logs/2026-04-21-session.md

@@ -0,0 +1,50 @@
+# Session Log — BirthBiologic — 2026-04-21
+
+## User
+- **User:** Mike Swanson (mike)
+- **Machine:** DESKTOP-0O8A1RL
+- **Role:** admin
+
+---
+
+## Summary
+
+New client onboarded into GuruRMM. Client and site created. Vault entry saved. MSI installer ready for deployment on their server.
+
+---
+
+## Client Details
+
+- **Client name:** BirthBiologic
+- **GuruRMM client ID:** `da526b38-e832-4159-ab13-a3d94e9897a2`
+- **Site:** Main Office
+- **Site ID:** `3b20ef97-c764-4ef8-9154-79c3d5b486f8`
+- **Site code:** `BRIGHT-PEAK-5980`
+- **API key:** `grmm_1ZB1qV9Q61b9Noq8BIaZGwLNjZMfF49i`
+- **Vault:** `D:/vault/clients/birthbiologic/gururmm-site-main.sops.yaml`
+
+---
+
+## Install URLs
+
+- **Landing page (for manual install):** `https://rmm.azcomputerguru.com/install/BRIGHT-PEAK-5980`
+- **MSI download (dashboard):** `https://rmm.azcomputerguru.com/sites/3b20ef97-c764-4ef8-9154-79c3d5b486f8/installer`
+
+---
+
+## M365 Status
+
+- **Tenant:** birthbiologic.com (tenant ID unknown — not yet looked up)
+- **Security Investigator app:** consented (2026-04-21)
+- **Exchange Operator, User Manager, Tenant Admin, Defender:** NOT yet consented
+- **Note:** sysadmin@birthbiologic.com does not have a SharePoint/M365 license — app-only auth via tenant-admin with `Sites.ReadWrite.All` is the approach for SharePoint access (no user license needed for app-only)
+
+---
+
+## Pending
+
+- [ ] Install GuruRMM agent on BirthBiologic server via MSI or landing page
+- [ ] Consent remaining apps in BirthBiologic tenant (user-manager, tenant-admin minimum)
+- [ ] Datto Workplace → SharePoint migration: PowerShell script using tenant-admin app-only credentials, reads local Datto file server, uploads to SharePoint via Graph API `Sites.ReadWrite.All`
+  - BirthBiologic has 14 SharePoint sites (5 new dept sites created 2026-04-20 for Datto migration)
+  - Datto Workplace server is on-premise at their office (local file system access available once agent is installed)