Fully pre-rendered shell + signed HubL partial

Logged-out visitors see a sign-in prompt. Logged-in members see their own contact record.

The shell stays pre-renderable and CDN-cacheable. After first paint, the browser sends a signed request that renders a contact-aware partial only for the current logged-in member.