Clerk-powered authentication. OAuth providers (Google / Microsoft / Apple) + email/password.
After sign-in, Clerk's useUser() exposes the user's organization (or prompts to pick one
if they belong to multiple). Tenant-scoped queries use the organizationId from there.
<SignIn />). This wireframe shows the layout but you don't write the form yourself — Clerk handles OAuth state, MFA, password reset, etc./sign-up. Clerk middleware handles redirects automatically.