AuthState tracks the auth onboarding flow.
nothing calls this directly
no outgoing calls
no test coverage detected