Sign in before the apps start talking.

Email magic links are open for this first auth slice. Google and Apple are wired as future provider buttons so they respond cleanly without pretending OAuth is ready.