Linking an external bank account (UC-2c) via the provider-hosted (Plaid-style) flow: consent, pick the institution, sign in on the provider's secure page, select the account, and connect. Manual entry with micro-deposit verification is the fallback when instant linking isn't available.
Instant linking — happy path (credentials entered on the provider, never in Harbor)