⚠️ Development mode — authentication is disabled. Anyone with the URL can read and write to the bank. Enable Cloudflare Access and set AUTH_MODE=enforced in the Worker before going live with Dr. Mustafa.