Covers password hashing (node:crypto scrypt), JWT session cookies (hono/utils/jwt), middleware ordering, local_credentials schema, OIDC-link flow, dev-bypass rework (option C), and break-glass CLI. Resolves all five open questions from CONTEXT.md. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>