• offload as much as possible to the package.
• register callback route exception for Kernel in service provider.
• other than configuring the apple keys in .env, everything should just work out of the box.

Acceptance Criteria

• Default routes (/apple/redirect, /apple/callback) are moved into the package and auto-registered
• Default controllers are moved into the package
• Users can override/disable default routes via config
• Existing apps can migrate without breaking changes (or a migration guide is provided)

Test Coverage

• Integration test: routes are registered and accessible without app-side route definitions
• Test: config option to disable package routes works correctly
• Regression test: apps that override controllers still function

WSJF Priority Score

• Score: 3.20
• User/Business Value: 7 (Zero-config setup is a major DX improvement)
• Time Criticality: 3 (Enhancement, not blocking)
• Risk Reduction/Opportunity Enablement: 6 (Eliminates most manual setup steps, reducing errors)
• Job Size: 5 points (S-M — route auto-registration + controller move + migration guide)
• Calculation: (7 + 3 + 6) ÷ 5 = 3.20