Control-plane auth (not mock endpoint auth):
- Email/password register + login → DRF Token - Google ID token → `POST /api/v1/auth/google/` - If Google email matches an existing account, Google is linked; both login methods work - Send `Authorization: Token <key>` on management API calls