Architecture: Auth handlers already have fully tested service layers (mfa.rs, magic_link.rs, otp.rs, password_reset.rs) — the work is wiring handlers to services + repositories. Dashboard handlers ...