fix: resolve all remaining TODOs, add dev mode auth bypass

- Learning engine: expand default weights from 3 to all 9 strategies
- Learning engine: resolve placeholder strategy_id with DB lookup
- Learning engine: pass strategy_sources from trade execution
- Trade executor: respect trading:paused Redis flag in RiskManager
- Portfolio sync: compute actual daily P&L from day-start snapshot
- Portfolio API: cumulative P&L from first snapshot, read pause flag
- Portfolio metrics: compute max drawdown and avg hold duration
- Add strategy_sources field to TradeExecution schema
- Add dev_mode config (TRADING_DEV_MODE) to bypass auth for local dev
- Dashboard: VITE_DEV_MODE bypasses ProtectedRoute and 401 redirects
- Vite proxy target configurable via VITE_API_TARGET
- Add top-level README.md and remaining-work-plan.md
- Update CLAUDE.md with correct counts and remove stale TODOs
- 404 tests passing

Made-with: Cursor

services/trade_executor/main.py

@@ -103,6 +103,7 @@ async def process_signal(
         status=result.status,
         signal_id=signal.signal_id,
         strategy_id=None,
+        strategy_sources=signal.strategy_sources,
         timestamp=result.timestamp,
     )
 
@@ -193,7 +194,7 @@ async def run(config: TradeExecutorConfig | None = None) -> None:
     )
 
     # --- Risk manager ---
-    risk_manager = RiskManager(config, broker)
+    risk_manager = RiskManager(config, broker, redis=redis)
 
     # --- Database (for persisting trades) ---
     db_session_factory = None