Frontend MVP shell
This starter uses a cookie-backed session stub so the frontend routes, layouts, and navigation can be validated before Keycloak is wired in.
Access entry point
Replace the role buttons with Keycloak redirect logic once identity provider settings are available.