PR #303 landed on main and added Depends(require_local_operator) to the
@router.post decorators for /api/sentinel/token and /api/sentinel/tile.
PR #298 (this branch) edited the same decorator lines AND function bodies
to add the env-credential fallback resolver.
Resolution keeps BOTH:
* The require_local_operator dependency from #303 (the auth gate)
* The _resolve_sentinel_credentials helper from #298
* The env-fallback path inside the function bodies
Both layers are independent — the gate blocks anonymous callers, the env
fallback lets legitimate (gated) callers omit credentials from the body.
Verified: 46 tests pass against the merged code, including both
test_sentinel_credentials_server_side.py (#298 fallback) and
test_sentinel_routes_auth_gate.py (#303 gate).
BigBodyCobain
32b8421a1c