Preview gates need one authenticated application query

Infrastructure readiness and login success can coexist with a broken application data path. Gate previews at three distinct layers: database readiness through the same runtime pool used by the app, authentication, and one representative authenticated database-backed query or screen. Treat each success as evidence only for that layer. A single smoke query is not a full browser suite or proof of the whole product.