Phase 0: read-only view of the friends registry. Add / remove / refresh-auth controls land in Phase 1 alongside service-side per-friend Sabre login.