MVP: Auth + 2FA (TOTP), per-user HubSpot/OpenAI keys (encrypted), schema explorer, query + chat-to-chart.