Protected Shell

Portal shell scaffolded

Milestone 4 will put session and entitlement checks in front of this route and expose the minimum client portal experience.