Passwordless sign-in
This adds the first real product auth layer: multi-tenant sessions, tenant-scoped connectors, and privacy/export controls.
In local development, the generated OTP is returned in the response. In production, this route is the placeholder for real email delivery.