Sign-in is identity only. Repository analysis uses public GitHub endpoints and never asks for write access.
Email and password, stored hashed by better-auth. Use at least 10 characters.