3 steps for email signup, 2 steps for social signup
Step 1: User clicks Google/Discord → OAuth redirect → authenticated
Step 2: Passkey setup (optional, same as Step 3 above) → Done
OTP step is skipped — email is already verified by the OAuth provider.