feat(portal): add service drawers and employee portal preview

www/reports/migration-summary.md

@@ -4333,3 +4333,20 @@ The owner also authorized `/lp/early-intervention`. It is migrated independently
 At the owner's request, added a simple five-link review index modeled on the publicly retrieved `https://astro.web3app.dev/` index (normal TLS). `src/pages/lp/[...review].astro` generates only `/lp`, only when `PUBLIC_ALLOW_INDEXING` is not `true`. It is explicitly labeled temporary/testing, always `noindex,nofollow`, absent from sitemap/hreflang and normal navigation, and links only to eligible local landing-page records. No submissions, scripts, tracking or external assets were added. Production/indexing-enabled output remains 127 routes; normal staging has 128, including this review utility. Indexing is a build gate, not access control: never deploy the staging artifact as a production release.
 
 Build and link audit pass. Library regression coverage checks the exact five destinations, staging robots, sitemap exclusion and absence from the indexing-enabled build. Guarded Chromium checks at 320/1440px pass with visible keyboard focus, no overflow and all five local links returning 200; no external browser requests occurred. Screenshots and browser evidence are temporary at `/tmp/aia-campaign-browser-HdWNvy/`. Prior five-page integration evidence remains historical; the new offline reconciliation records the extra staging utility. Nothing was staged, committed or deployed.
+
+## 2026-10-30 service and employee-portal development revision
+
+Owner-authorized intentional deviations: service CTAs now say Request a
+Consultation / Solicitar una consulta and progressively open authorized test
+drawers; automatic timing is four seconds or half-page scroll with a shared
+30-day dismissal preference. Service-specific bilingual copy replaces generic
+introductions. The same page layout, slide-in treatment and iframe restrictions
+remain. Live public read-only captures were cache-qualified editorial reference,
+not a new clinical approval.
+
+The metadata-only employee route now includes the source-backed Access Code
+Required interface. Real encrypted views remain unavailable without private
+owner input. A passive DOM renderer intentionally disallows executable markup,
+remote media and embedded forms; real-view fidelity therefore needs owner review.
+No internal resource was published. Full evidence and boundaries are in
+[the consolidated report](phase-9-service-portal-consolidated-2026-10-30.md).