April 8: Seed Accounts and Sanitized Messages
Ripping out the last of the hardcoded dev credentials, wiring the JWT secret through docker-compose, gating auth debug logs behind a development flag, and sanitizing the remaining places that were returning raw ex.Message to clients.