feat: AASCU intermediary discovery report — gap analysis + dashboard pages

[William-Hill]

Summary

Adds the deliverable from a 21-minute discovery session with two AASCU Intermediaries (one IR-focused, one data-engineering-focused) describing how the PDP dashboard fails the institutions they serve. Ships both as research artifacts under docs/ and as auth-protected dashboard pages under /discovery/aascu.

• New routes: /discovery/aascu (brief, single-column memo) and /discovery/aascu/full (long-form editorial)
• Auth gating via ROUTE_PERMISSIONS — restricted to admin, ir, leadership
• Discovery nav link added to NavHeader (visible to gated roles)
• Pages use next/font/google (Fraunces, Newsreader, IBM Plex Sans/Mono, JetBrains Mono) + scoped CSS Modules — design lives alongside Tailwind/shadcn without leaking
• 8 follow-up issues filed from this session: feat: metric definitions glossary with IPEDS and state-compliance cross-walks #105 — spike: institution grouping helper for fall datathon (shared SIS + shared goal) #112

What's in docs/

File	Purpose
aascu_intermediary_feedback_summary.md	Full report — 11-row pain-coverage matrix, P0/P1/P2 issue scoping
aascu_intermediary_postmortem.md	4L (Liked / Learned / Lacked / Longed For) retrospective + per-IFS post-work
aascu_gap_analysis.html	Standalone editorial HTML for sharing without dashboard auth
aascu_gap_analysis_simple.html	Standalone brief HTML (companion to the above)
aascu_intermediary_feedback_summary_gdocs.md	Google-Docs-paste-friendly variant (tables flattened to definition lists)

The standalone HTML files duplicate the dashboard pages on purpose — they're for external sharing (e.g., to AASCU stakeholders without dashboard accounts). The dashboard versions are the canonical, auth-protected source.

Verification

• tsc --noEmit clean for new files (4 pre-existing errors in unrelated files, not introduced here)
• npm run build succeeds — both new routes appear in the route manifest
• Auth gating confirmed via curl: unauthenticated requests to both routes return 307 → /login
• Visual verification needed by reviewer: log in as admin/ir/leadership, navigate to Discovery, confirm both pages render correctly and the NavHeader integrates without overlap

Test plan

• Log in as admin → click "Discovery" in nav → brief loads with cream/forest aesthetic
• Click "aascu / full" footer link → editorial loads with cream/sienna aesthetic + animated hero
• Issue cards link to GitHub issues feat: metric definitions glossary with IPEDS and state-compliance cross-walks #105–spike: institution grouping helper for fall datathon (shared SIS + shared goal) #112 in new tab
• Log in as advisor or faculty → "Discovery" link is hidden, direct URL redirects to /
• Sign out, hit /discovery/aascu directly → redirected to /login
• Mobile (≤640px brief, ≤920px full) → grids collapse to single-column

Notes

• Branch is off main directly (not the SHAP fine-tuning epic) — this work is independent.
• No new dependencies added; uses existing next/font/google pipeline already wired in root layout.
• CSS Modules introduced for the first time in this codebase, but they coexist cleanly with Tailwind (scoped class names, no globals affected).