feat(auth): Add email authentication form (#122331)

Adds the accessible email/password sign-in and recovery form on top of
the preceding hooks. Login and recovery share email state and
transitions, while dynamic errors use live alert semantics and recovery
confirmation remains owned by the form.