Reusable Sign-In / Challenge State composition

Provider-controlled Mailcow SSO + Turnstile, verification and recovery

Focus • keyboard • current authority • Light/Dark • feedback/recovery