Same skip paths, Bearer/query token, Clerk RS256 leftover, and local HS256 contract. routers/auth.py, user records, and AUTH_JWT_SECRET are untouched.
Export names stay for the cloud overlay. JWT still lives only in inherited auth.py.