Access decision
Mock-auth persona mode is disabled in production. Wire a real auth lane before production access.