Portal Server

Push backend for the Portal iOS app. No UI here yet.

• GET /api/health — status + device count
• POST /api/register — register an APNs device token
• POST /api/push — send a push (one device or broadcast)

All POST routes require Authorization: Bearer $PORTAL_API_SECRET.