## Context `GatewayServer::new()` defaults `auth_token` to `None`, disabling bearer auth silently. ## Solution Add `tracing::warn!` when `auth_token.is_none()` in `serve()`. **Epic:** #855 | **Effort:** S | **Crate:** zeph-gateway
