Passwordless entry

Sign in without adding another password surface.

Magic-link-only access keeps the MVP simple: one email, one link, one short-lived session.