Credentials auth is the zero-config baseline. Google sign-in and magic links are shown as guarded fallbacks until external credentials are provided.