"""Authenticated routes — JWT required.

Target: portfolio, alerts, intel feeds, profile, settings.
"""