The implementation plan still said "oauth not wired" in a Task 5
error-string sketch. Prefer "not implemented" so unfinished
wiring language does not read like a sibling-product leak.
Outsiders reading this module should not see private sibling
names (tradey), unfinished rewire notes, or /fast/projects
lab paths. Keep the library self-contained in README, design,
plan, and test fixtures/identity strings.
Callers set MCP/OAuth identity on Config before Login/Connect.
Unparseable money errors instead of silent zero. Tests hit an
httptest Robinhood MCP mock, not only injected Callers.