Visual Companion Auth Hardening Design

Date: 2026-06-10 Status: Draft for Drew review Fix the security and reliability gaps found in PR #1720's brainstorming visual companion without changing the companion's core workflow or adding runtime dependencies. The fixes must be test-first and must leave clear automated evidence for: The companion serves agent-generated local UI for a single brainstorming session.