Email + password via Better Auth. Or use Google/GitHub if configured.
API: POST /api/auth/sign-in/email / POST /api/auth/sign-up/email — session cookie __Secure-better-auth.session_token is set on success.
POST /api/auth/sign-in/email
POST /api/auth/sign-up/email
__Secure-better-auth.session_token