Secure candidate authentication (email + Google/LinkedIn SSO) ships in Phase 2, alongside the candidate dashboard, profile, and resume management.
