Auth-ready shell — email + continue stub only. Real authentication wiring comes later.