Parent Portal

Add Firebase web config to unlock the portal.

The portal routes are protected and ready, but this environment still needs the public Firebase web values in .env.local before sign-in can work.