One route set serves portal and console; the caller decides authority
Context
Staff and buyers use many of the same purchase actions with different authority.
Decision
Retain shared portal-capable routes, with service-level party restrictions for buyers and console-only intervention boundaries.
Alternatives Considered
Duplicating route sets creates another place for equivalent purchase logic to drift.
Consequences
Service tests must prove party authority and workspace isolation for each operation. Portal storefront scope is held even though backend routes exist.