Register a portfolio target and schedule an asynchronous refresh

Authenticated control-plane signal. It only writes a coalesced dirty generation; provider and node work is performed later by the projection worker.