"""Authenticated routes - JWT required.

Target: portfolio, alerts, intel feeds, profile, settings.
"""