Protected multi-project operator runtime for Codex-driven delivery.

The dashboard is now guarded by user sessions and backed by the NestJS project-scoped API.