Console

Authenticated customer console for Rasid. Add and remove watchlist items, view digest history, acknowledge alerts.

Console scaffolding (epic #858). Auth wiring, digest history, and alerts surfaces ship in follow-up PRs. The watchlist endpoint (GET /api/watchlists) is already live behind the session middleware (RLS-isolated per tenant).