feat(auth): admin can link Google and use it to log in
Account → "Sign in with Google": link/unlink your Google account
(/auth/google/link, requireAuth → stores google_sub on own account).
Google callback: link mode alongside login mode. An admin may log in
with Google ONLY if their google_sub is linked and matches (otherwise
"Google = never admin" rule holds). Unlinking requires a password
(no lockout).
Admin notice on the login page explains the link route.
Co-Authored-By: Claude <noreply@…>
(No files)
Note:
See TracChangeset
for help on using the changeset viewer.