Do a targeted compatibility pass on related client code.
- Verify WebSocket client code sends ?api_key= when in API key mode
- Verify JWT WebSocket connections still use ?token=
- Check that no existing HTTP/SSE auth behavior was altered accidentally
- Report any mismatches in auth field names or URL param names