Route group scaffolding keeps this page public while all core app surfaces can stay behind middleware.