Private portal

Clean navigation, secure sign-in, and ready for Synology deployment.

This starter is prepared for Google and Facebook OAuth, reverse proxy, and containerized production runtime on DSM 7.1.1.