Both services need to read JWT_SECRET from the shared .env file in the parent directory (backend/services/.env). Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>