Auth placeholder

Client Login

This route reserves the client access doorway. Real OAuth will be added after the public shell is stable, so we do not imply private access before it exists.