New workspace
Email and password only. No social login, no bypassing the backend.
Telegram onboarding runs under a signed-in user.
For protected routes and UI state.
