Phase 1.0 stub auth — credentials from server env vars.