Comprehensive admin + user dashboards (production-ready)

components/auth/sign-up-form.tsx

@@ -26,6 +26,9 @@ export function SignUpForm({ googleEnabled }: { googleEnabled: boolean }) {
       password: String(form.get("password")),
     });
     if (error) {
+      // Accepted tradeoff (L8): the raw Better Auth message can reveal that an
+      // email is already registered (account enumeration). We keep the specific
+      // message for UX clarity; the signup endpoint is rate-limited server-side.
       toast.error(error.message ?? "Could not create account");
       setLoading(false);
       return;