Auth

• `AuthLayout`: puts the logo on top and the content centered. With brand (product message, illustration) the page splits in two on wide screens, the brand area on a muted surface or, with brandSurface="brand", the theme's brand color; without it, the column sits on a muted page.
• `AuthCard`: the form's card — title as the page's h1, description, your fields, and a centered footer for the links between screens.
• `AuthSubmit`: the full-width submit button, with a spinner while isPending.
• `ResendCode`: "Resend code" behind a cooldown (cooldown seconds, 60 by default, started on mount). It's disabled with an m:ss countdown, then onResend (pending while its promise runs) restarts it.

The stories show sign-in, forgot password and a two-step reset (the server checks the code, then the new password follows the rules).

Built-in text is in English; translate ResendCode with i18n.labels.