OAuth social login (Google/GitHub)

[glennmichael123]

Problem

The Google/GitHub buttons in login.stx/register.stx render with icons but have no @click handlers, no OAuth routes, and no provider config.

Acceptance

• OAuth redirect/callback routes + provider config (env).
• Wire the buttons; create/link users on first login.
• Make User.password nullable for OAuth-only accounts.