Sentinel Privacy

Milestone 2 dashboard -- development only. Auth is a placeholder header, not a real session; see src/server/auth.ts.