[Mathieu2301]

Summary

• run the real Auth/Firestore-backed control-plane routes behind ephemeral loopback HTTPS
• create a synthetic home and Home Key, then feed the real MiakAPI provider into the real relay
• prove initial HELLO and scheduled REAUTH through the production JWKS and token-verification path
• pin the exact Miakapp-V3 and MiakAPI commits in a dedicated CI job
• keep local trust injection behind a Go integration build tag and delete all temporary key material

Validation

• go test -race ./...
• go test -race -tags integration ./internal/auth
• go vet ./...
• go vet -tags integration ./internal/auth ./test/platform-fixture-server
• ./scripts/check-platform-integration.sh /Users/mathieu/conductor/workspaces/miakapp-v3/lima-v3 /Users/mathieu/GitHub/MiakAPI
• observed generation 1, initial + reauth, two successful relay verifications, and zero reconnects