Account sync

Identity boundary is ready in code.

Auth0 production credentials are not active on this environment yet. Passport remains the recovery path for durable watch references.