Reimbursement approvals without spreadsheet drift.

Google OAuth is the primary sign-in path. Magic links remain available for approved users who do not use Google accounts.