Development-only
Development-only surface — registered ONLY when QUASAR_DEV_AGENT_AUTH=1, never in production (the control plane refuses to boot with the flag set and QUASAR_ENV=production). Paths carry x-dev-only true; the route-coverage drift test skips them (their registration semantics are asserted by dedicated tests instead).