SFL Meta OAuth Stage 2: deployed, locked until owner authorizes activation.