Insurance-claim workspace

This surface is gated behind Cloudflare Access. The active claim cockpit is generated from private claim data and is not yet wired here — see RESUME.md for the build plan.