iEduPortal API v1 — Stage 12

Adds protected read-only academic reference endpoints:
- /api/v1/classes/
- /api/v1/subjects/

Both require the Stage 10 Bearer access token. Pagination is supported; subjects may be filtered by class_id.
No database schema changes are required.
