Protected lesson area

Register and enroll before opening a lesson. The server derives identity from the session and verifies entitlement before returning media metadata.

Production media, captions and transcripts must be supplied by the host application; the scaffold fixtures are development-only.