Harden production authorization and service auth

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0217e-8c4c-7383-be6b-f50a6e485306

tests/test_audit.py

@@ -96,6 +96,24 @@ def test_lane_audit_empty_directory_is_a_valid_empty_summary(tmp_path):
     assert summary.render().startswith("Lane audit summary for 'test-lane'")
 
 
+def test_lane_audit_counts_edge_queued_delivery(tmp_path):
+    path = tmp_path / "evidence-2026-08-23.jsonl"
+    path.write_text(
+        json.dumps(
+            {
+                "catalog_id": "test-lane",
+                "action": "evidence-delivery",
+                "result": "queued",
+                "detail": {"outbox_id": "3f12014e-47c1-48a5-9c8f-774c1dac1853"},
+            }
+        )
+        + "\n",
+        encoding="utf-8",
+    )
+    summary = summarize_lane_evidence(tmp_path, "test-lane")
+    assert summary.hub_delivery == {"queued": 1}
+
+
 def test_cli_parser_exposes_audit_json_command():
     args = build_parser().parse_args(["audit", "test-lane", "--json"])
     assert args.catalog_id == "test-lane"