Resolve the provider and report how it must be linked. direct returns an authorization URI Logto built, and the link completes server-side. verified means the connector cannot be driven without a session, so the browser drives it against the Account API and Logto requires an ownership proof.