My approach to building signup/auth, where data lives, and how security fits—kept intentionally stack-agnostic until the problem is clear.