docs: document full and embedded rendering with server authentication

mkdocs.yml

@@ -50,6 +50,7 @@ nav:
   - Preprocessing-complete server handoff: operations/server-handoff-260906-preprocessing-complete.md
   - Local authentication: install/authentication-local.md
   - Generic OIDC: install/authentication-oidc.md
+  - Portal upstream authentication: install/authentication-upstream.md
   - Authentik: install/authentik.md
   - Workspace operations: operations/workspaces.md
   - Shell and localization: operations/shell-and-localization.md
@@ -69,6 +70,7 @@ nav:
   - Overview: architecture/overview.md
   - Components, modules, and flows: architecture/components.md
   - Authentication and authorization: architecture/authentication.md
+  - Full and embedded rendering: architecture/application-shell.md
 - Contracts and integration:
   - Portal Shell Adapter v1: contracts/portal-shell-adapter-v1.md
   - Catalog schema snapshot RPC: contracts/catalog-schema-snapshot.md
@@ -81,6 +83,7 @@ nav:
   - DWH client enrollment: install/dwh-auth-client-enrollment.md
   - DWH REST TLS: install/dwh-auth-tls.md
 - Decisions and acceptance:
+  - Shell and authentication acceptance: testing/authentication-manual-acceptance.md
   - Architecture decisions:
     - 0001 Metadata catalog: adr/0001-postgres-metadata-catalog.md
     - 0002 Workspace database secrets: adr/0002-workspace-database-secret-references.md