phase G: data minimisation + passwordless auth + DeepSeek-first LLM

Server no longer holds portfolios. Holdings live in the browser
(localStorage); the server publishes an anonymous ticker_universe and a
gzipped /api/universe payload identical for every authenticated user, so
access patterns can't betray which tickers a user holds. AI commentary
is generated ephemerally from the browser-supplied pie and the cost
ledger row records no positions. Migrations 0009-0011 added the
universe table and dropped positions / portfolio_snapshots /
portfolios.

Authentication is now e-mail OTP only. Migration 0010 dropped
password_hash and email_verified (every active session is by
construction proof of email control). The /signup endpoint is gone;
signup and login share a single email-entry page. Email rendering is
HTML+plain-text multipart with a shared brand palette (app/branding.py)
asserted in sync with the CSS by a drift-detection test.

LLM provider defaults to DeepSeek-direct (cheaper, api.deepseek.com)
with OpenRouter as automatic fallback if DeepSeek fails. ai_log_job and
indicator_summary_job now iterate the two tones (NOVICE, INTERMEDIATE)
per cycle so the dashboard's tone toggle is instant; PROMPT_VERSION
bumped to 6 with an educational anti-TA / anti-gambling stance baked
into _CORE. NOVICE mode renders a curated glossary inline (CBOE VIX,
yield curve, HY OAS, etc.) with JS-positioned tooltips that survive
viewport edges and sticky bars. Model name and tokens hidden from the
user UI; still recorded in StrategicLog.model and AICall for admin.

Layout adds a sticky top nav, a sticky bottom markets bar (one chip per
exchange with status LED + headline index + 1d change), and
Phase H feedback reporting is queued in tasks/todo.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

app/templates/dashboard.html

@@ -5,7 +5,7 @@
 <div id="dash-header-container"
      style="grid-column: 1 / -1;"
      hx-get="/api/summary/aggregate?as=html"
-     hx-trigger="load, every 300s"
+     hx-trigger="load, every 300s, tone-changed"
      hx-swap="innerHTML">
   <div class="empty">loading aggregate read…</div>
 </div>
@@ -29,7 +29,7 @@
   <div id="indicators-body"
        class="panel-body panel-body--scroll"
        hx-get="/api/indicators/{{ groups[0] }}?as=html"
-       hx-trigger="load"
+       hx-trigger="load, tone-changed"
        hx-swap="innerHTML">
     <div class="empty">loading…</div>
   </div>
@@ -47,15 +47,15 @@
 <section id="portfolio-panel" class="panel">
   <div class="panel-header">
     <span class="title">Portfolio</span>
-    <span class="meta">ingest hourly @ :15 UTC</span>
+    <span class="meta">held locally · prices via /api/universe</span>
   </div>
-  <div class="panel-body"
-       hx-get="/api/portfolios?as=html"
-       hx-trigger="load, every 60s"
-       hx-swap="innerHTML">
-    <div class="empty">loading…</div>
+  <div class="panel-body">
+    <div id="pf-mount">
+      <div class="empty">loading…</div>
+    </div>
   </div>
 </section>
+<script src="{{ url_for('static', path='/js/portfolio.js') }}" defer></script>
 
 <section id="log-panel" class="panel">
   <div class="panel-header">
@@ -64,7 +64,7 @@
   </div>
   <div class="panel-body"
        hx-get="/api/log/latest?as=html"
-       hx-trigger="load, every 300s"
+       hx-trigger="load, every 300s, tone-changed"
        hx-swap="innerHTML">
     <div class="empty">awaiting first log…</div>
   </div>