Apple account route.

This account route is in place. Add the Apple provider values in deployment secrets before automatic account access is enabled. Manual subscription activation remains the approval gate.