I also asked in the Netlify support forum, and an engineer provided a workable reply: https://answers.netlify.com/t/magic-login-link-callback-redirect-is-not-working/156298. However, I decided to give up and deploy to Vercel instead after running into another issue with the auth cycle in my app.

So the solution is: deploy to Vercel, which worked perfectly.