Headless social-login bridge: a secret-gated GraphQL mutation that verifies a provider-signed OpenID Connect ID token (Google, Apple) against the issuer's JWKS and exchanges it for a Magento customer token, find-or-creating the customer by the token's verified email.