/terminal/alerts

Scaffold route. Auth-gated; M4 implementation lands here.