Trading Operator Portal

Staging-ready, read-only runtime. Auth is server-enforced, tenant-scoped, and fail-closed.

• Customer portal
• Admin portal
• Activation and onboarding lane

Public signup stays disabled. Execution controls stay disabled. Subscription status remains blocked as BLOCK_FIELD.