Web = pure frontend/BFF, logic in the backend

Verified: web holds no business logic or crypto/secrets — the server-side BFF only proxies to the backend (which holds the service token, signs OIDC tokens, enforces authz). The browser never calls the backend directly.

Added

30 June 2026

Finished

30 June 2026