**Area:** `ApiKeyAuth::verify` **Problem:** Linear equality checks may leak timing differences. **Testing gap:** No tests/benchmarks for constant-time comparison policy. **Acceptance tests:** Adopt constant-time compare and add regression test for behavior.
Area:
ApiKeyAuth::verifyProblem: Linear equality checks may leak timing differences.
Testing gap: No tests/benchmarks for constant-time comparison policy.
Acceptance tests: Adopt constant-time compare and add regression test for behavior.