Real auth is enabled early so onboarding, creator setup, and admin permissions are validated end-to-end.