Restricted to allowlisted Civic Lattice accounts.
Google sign-in is not configured on this deployment (GOOGLE_CLIENT_ID / GOOGLE_CLIENT_SECRET).