feat: restyle login page to match Bluesky OAuth UI

AGENTS.md

@@ -205,8 +205,16 @@ import { AuthServiceContext } from './context.js'
 
 - Use `bd` (beads) for all task tracking — **not** TodoWrite or markdown files.
 - `bd ready` — show available work; `bd create` — new issue; `bd close` — done.
-- `bd export -o .beads/issues.jsonl` to export issues (commit this file).
 - Do **not** use `bd sync` (obsolete).
+- The beads database uses **dolt** as its backend. `.beads/backup/` (normalised
+  JSONL per table) is tracked in git — **not** `.beads/issues.jsonl` (legacy
+  denormalised export, no longer the source of truth).
+- During rebases/merges, **never** resolve `.beads/` conflicts manually or with
+  `merge=ours`. The `merge=beads` driver must be registered; if it isn't,
+  the merge will fail — fix the driver registration rather than working around it.
+- **TODO**: verify whether `merge=beads` is still the right strategy for
+  `.beads/backup/*.jsonl` now that dolt is the backend, or whether conflicts
+  there should simply never happen (dolt is source of truth).
 
 ## Key Gotchas
 

packages/auth-service/.env.example

@@ -75,6 +75,7 @@ SESSION_UPDATE_AGE=86400
 # Default: numeric. Alphanumeric codes have higher entropy but require text input instead of numeric keyboard.
 # OTP_CHARSET=numeric
 
+
 # Social login providers (both ID and SECRET must be set to enable)
 # Google: https://console.cloud.google.com/
 # GOOGLE_CLIENT_ID=