Welcome back.

Sign-in uses a one-time magic link sent to your email. No passwords to remember.

Sprint 6 will wire this to Supabase Auth. For now, this submits to a stub.