Interactive graph
Browser obtains Cognito ID token; API verifies it, syncs membership, then portfolio APIs return accessible workspace portfolios.