Identity activation gate

TrackFormation account access is being secured.

The Clerk integration is installed, but this environment does not have identity keys yet. Credential collection remains off until verified email, MFA, passkeys, recovery, bot protection, webhook verification, and server-side membership tests are configured.