Product UI no longer switches sessions locally; API clients attach Bearer tokens only and LocalAuthClient stays test-only outside the prod bundle.
Co-authored-by: Cursor <cursoragent@cursor.com>