Description:
Update the Next.js middleware to protect /profile and /settings routes. Unauthenticated users accessing these routes should be redirected to /login. Follow the existing middleware pattern for protected routes.
Acceptance Criteria:
File(s): frontend/middleware.ts