refs #709: replace portal query token with HttpOnly auth

poc4_active_source_20260714/infra/systemd/hmm-portal-auth.service

@@ -0,0 +1,29 @@
+[Unit]
+Description=HMM Portal HttpOnly Cookie Authentication
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=opc
+Group=opc
+WorkingDirectory=/opt/hmm-poc4
+Environment=PYTHONUNBUFFERED=1
+EnvironmentFile=/opt/hmm-poc4/.env
+ExecStart=/opt/hmm-poc4/.venv/bin/python -m src.agent_console.auth_gateway
+Restart=on-failure
+RestartSec=3
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+LockPersonality=true
+RestrictAddressFamilies=AF_INET AF_INET6
+UMask=0077
+
+[Install]
+WantedBy=multi-user.target