Portal

App skeleton. Auth + portals wire in here. The marketing site links to /login and /apply.