Account listing and edits currently live alongside active OAuth flows in albedo_oauth, making the sign-in lifecycle harder to follow.
Move account storage and public projections into albedo_auth_accounts. Sign-in orchestration keeps ownership of the grouped credential and login-status commit. Locking, errors, and API behavior stay unchanged.