{"ok":true,"phase":200,"version":"20.0.0","project_id":"Slashborne","auth_enabled":false,"token_configured":false,"risk_level":"warning","risks":["AI_OPERATING_AUTH_ENABLED is off. External access should remain behind trusted network/VPN/reverse proxy."],"protected_routes_policy":"write/risky endpoints should require auth in production; this status API does not enforce global auth by itself."}