feat: harden bootstrap and add tests

src/app/api/user/portal/route.ts

@@ -2,6 +2,8 @@ import { NextResponse } from 'next/server';
 import { requireRole } from '@/lib/auth';
 import { db } from '@/lib/db';
 
+export const dynamic = 'force-dynamic'; // Prevents static generation
+
 export async function GET() {
   try {
     const session = await requireRole('user');