CI / CI (pull_request) Successful in 2m36s
- proxy.go: log Warnf when jwtValidator==nil so auth bypass is observable - proxy_test.go: TestAuthenticateV1ProxyLevel covers 401/403/pass branches (authenticateV1 cov: 10.5% → 77.3%, CRAP: 42 → 8.5)