feat(portal): add service drawers and employee portal preview

www/tools/phase10-artifact-verify.mjs

@@ -133,6 +133,7 @@ export async function verifyArtifact(root, mode = 'staging') {
       }
     });
     const adapters = formAAdapters(html);
+    if (/<script[^>]*data-portal-payload[^>]*>\s*(?!null\s*<)[\s\S]*?\"streams\"[\s\S]*?<\/script>/i.test(html)) errors.push(`${route}: private portal ciphertext is not an approved release artifact`);
     if (!title) errors.push(`${route}: missing title`);
     if (!canonical) errors.push(`${route}: missing canonical`);
     if (!robots) errors.push(`${route}: missing robots directive`);
@@ -191,6 +192,7 @@ export async function verifyArtifact(root, mode = 'staging') {
   const digest = createHash('sha256');
   for (const file of files) {
     const relative = path.relative(root, file).replaceAll(path.sep, '/');
+    if (/(?:^|\/)(?:private|hubfs)(?:\/|$)/i.test(relative)) errors.push('private/legacy portal resource directory in artifact');
     if (/\.(?:html?|js|mjs|css|json|xml|txt)$/i.test(relative)) {
       const contents = await fs.readFile(file, 'utf8');
       if (/262946078314059/i.test(contents)) formAResourceFiles.push(relative);