Sign in moved

Authentication UI lands in Prompt 2. This is a placeholder shell — no fake Firebase/auth.