fn reference(scope: &ConnectionScope, provider: SocialProvider) -> String
Derives a stable persistent profile identity without trusting form-supplied paths or owner identifiers.