IO — advisory assistant

Dev mode — tenant "demo", stub model, login optional until OIDC config is set (ADR-034 D9).