Initial commit: Port Nimara CRM (Layers 0-4)

Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/app/api/portal/documents/[documentId]/download/route.ts

@@ -0,0 +1,26 @@
+import { NextResponse } from 'next/server';
+
+import { withPortalAuth } from '@/lib/portal/helpers';
+import { getDocumentDownloadUrl } from '@/lib/services/portal.service';
+import { logger } from '@/lib/logger';
+
+export const GET = withPortalAuth(async (_req, session, params) => {
+  try {
+    const documentId = params.documentId;
+
+    if (!documentId) {
+      return NextResponse.json({ error: 'Document ID required' }, { status: 400 });
+    }
+
+    const url = await getDocumentDownloadUrl(session.clientId, documentId, session.portId);
+
+    if (!url) {
+      return NextResponse.json({ error: 'Document not found' }, { status: 404 });
+    }
+
+    return NextResponse.json({ url });
+  } catch (error) {
+    logger.error({ error }, 'Portal document download URL fetch failed');
+    return NextResponse.json({ error: 'Failed to generate download URL' }, { status: 500 });
+  }
+});