Activation and magic-link consumption are reserved for the next auth milestone. This shell is already placed in the route structure so the ERP auth flow can grow without another frontend re-org.