Sign-in-or-up with strict enumeration protection

A single sign-in-or-up flow that never reveals whether an email is registered.