Power BI Portal

Keycloak-authenticated report portal with app-owns-data Power BI embedding and a self-service control plane. This is the Phase 0.2 skeleton.