Which social logins are actually usable in this environment.

The login/signup pages render one button per provider, and an unconfigured provider's /login endpoint 503s — which would strand the user on a raw JSON error page. The frontend filters its buttons on this so a provider whose credentials aren't deployed yet simply isn't offered, and appears on its own once the secrets land (no frontend release needed).