fix(web): update protected route layout for security agent and usage …

[FaisalMisbah23]

Summary

Fix unauthenticated access handling for security agent and usage pages.

Previously, protected route content in security agent and usage could render before authentication was fully enforced, which allowed logged-out users to reach page content and then see an auth error.

This change enforces the protected route guard at the layout level and adds coverage, so unauthenticated users are redirected before protected content renders.

Fixes #4286

Verification

• Confirmed unauthenticated users are redirected
• Added test coverage for the protected route authentication requirement

Visual Changes

N/A

Reviewer Notes

This change applies the authentication guard at the layout level so all protected routes under the app hierarchy require authentication before rendering.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (3 files)

• apps/web/src/app/(app)/protected-routes.test.ts
• apps/web/src/app/(app)/security-agent/layout.tsx
• apps/web/src/app/(app)/usage/page.tsx

---

_{Reviewed by gpt-5.4-20260305 · Input: 54.8K · Output: 6.8K · Cached: 236K}

_{Review guidance: REVIEW.md from base branch main}