Secure founder workflow
Authentication protects every workspace screen before first paint.
Email verification, custom claims, workspace membership, and platform-admin claims are all treated as backend-owned template responsibilities.
Reset password
Firebase Auth sends the reset email and handles the secure action link.