React auth perimeter for the first platform slice How public, account and admin shells share one JWT session model.