Three OAuth providers wired through GoTrue: GitHub, Google, and Microsoft. Plus passwordless magic-link sign-in for anyone who doesn't want a third-party account. The OAuth initiation now lives on a dedicated server route to keep cookies and the redirect URL stable.