feat: Tier 0 server auth - cookie lifecycle, CSRF enforcement, device tokens, SSO wiring#1004

Open

pyramation wants to merge 3 commits intomainfrom

devin/1776502080-tier0-cookie-csrf-sso

Commits on Apr 18, 2026

feat: Tier 0 server auth - cookie lifecycle, CSRF enforcement, device tokens, SSO wiring
pyramation
committed
fix: intercept res.writeHead()+res.end() instead of res.json() for cookie injection
pyramation
committed
refactor: eliminate all process.env from new middleware, use opts/getNodeEnv()
pyramation
committed