Security
Two-factor authentication (TOTP / WebAuthn), active session management, password reset, and recent-activity log.
Sign in to access
Live after Phase 5 PR F (auth scaffolding). Until then, this route is a placeholder that points to the existing sign-in flow.