Persistent chrome used by every authenticated route. Sidebar hides below md:; mobile nav is a separate concern for a later plan.