Nepal Trend-Commerce

Ops: MANUAL_REVIEW + COD

Spike JWT stays on the server. HTTP Basic gates the proxy. Not HMAC capture. COD confirm is not prepaid PAID. Cash collection is later ops.

Commerce is not configured

TC_OPS_SPIKE_JWT is not set. This app never mints a JWT and never calls AuthService.