Login is still minimal while auth is being wired up.

The MVP skeleton keeps auth lightweight for now. Use a league code to join or create a new league, and plug in a full auth provider later.