Auth context pending

Protected routes resolve this in the auth task.

Tariffs

Tariff routing is set up for the later schedule and item-management surfaces.

Route scaffolded and ready for domain implementation

Tariff item queries, editors, and audit history will land during the tariff slice.