AUTH_MODE=mock (development/test only) — the Provider accepts any non-empty credential; only the underlying Session mechanism (Gate-5) is real.