fix/portal-shell-overflow-shield
main
portal-shell's app.scss has the same "100vh shell, internal main scroll" shape as portal-admin. Mirroring the shield keeps the two apps consistent — any future layout escape stops at the shell boundary instead of producing a phantom body scrollbar.