customer-assets portal (P-001 runtime proof; UI lands in later phases)