A JWT audience check passes in staging but fails in production

Authentication works end-to-end in staging and fails only in production behind an API gateway performing token exchange or translation.