Half of browser traffic already uses post-quantum key exchange and most people never noticed. Here are the finalized NIST standards, the real deadlines, and what to do first.