Auth, 2FA, and session policy.
Module framework ready — wire API + database when you share page mocks.