[warnerktsang]

Updates docs/espn.md (docs only):

• New 'What the API does' overview: reads, snapshot trends, waiver report, lineups, approval-gated writes, account, MCP tools, and the deliberate v1 no-matchups limit; points to the Routes table instead of duplicating it.
• New primary onboarding section: the browser-extension cookie-capture flow via https://cozycommons.dev/fantasy/connect (password never reaches the backend; cookies stored encrypted; cce_ token shown once). Onboarding is the only setup step: full API + MCP surface, lineup automation on by default, server-side scheduling cross-linked to docs/espn-scheduler.md.
• Password-login path reframed as the alternative, with a note that Disney risk checks reject it for many accounts (AUTHORIZATION_CREDENTIALS).
• Fixed stale scheduler fine print (backend scheduler exists; the automation endpoint is the opt-out/re-enable switch) and the /espn/me example (automation defaults to true).
• Routes table completed: POST /espn/onboard/login, GET /espn/waivers, DELETE /espn/account.