Personal AI Trading Platform

Phase 2. Broker: Alpaca (paper). Control API is authenticated — see docs/DECISIONS.md D-008.

The browser never holds the API token: this page calls a same-origin route that runs on the server and attaches it. See docs/DECISIONS.md.