Skips Keycloak SSO entirely when APP_DEBUG=true, treating every request
as an authenticated dev-admin user. Must stay false in any deployed
environment (see .env_prod).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>