{# Client-side normalization for auth inputs (UX convenience only; the server
remains the source of truth via lowercase username + iexact checks).
Opt in per input with a data-normalize attribute:
data-normalize="username" -> lowercase on every keystroke + trim on blur
data-normalize="email" -> trim on blur only (never case-folded; email
local-parts can be case-sensitive per RFC) #}