Portal contract
- Scoped to one linked family context.
- Uploads land through the shared `/api/uploads` contract.
- Analytics scripts should stay off this surface for PHI safety.
- WorkOS is not configured yet.
- Login URL unavailable until auth env is configured.