undefined === undefined — the auth bypass your AI wrote into your checkout

An AI-written auth check let every anonymous request through, because a missing env var made undefined === undefined. Fail-open auth is one config away from wide open.