Frontend shell for auth, dashboard, and public response flows.
Auth flow
Request a passwordless sign-in link.
The JWT token is stored locally in the browser until a real session system lands.