Email magic link or OpenID (Google and similar). Supabase will replace this mock later.
Mock: no email is sent — you are signed in immediately.