Sign in starts here.

The public entry is ready for review. Secure sessions, account verification and workspace handoff stay behind the private identity runtime.