Nepal Trend-Commerce

MANUAL_REVIEW ops

Spike JWT stays on the server. HTTP Basic gates the proxy. Not HMAC capture. Not a fake eSewa refund.

Commerce is not configured

TC_OPS_SPIKE_JWT is not set. This app never mints a JWT and never calls AuthService.