The secretsValidator marks JWT_SECRET as required:false (auto-generated at startup), but the test asserted valid:false when JWT_SECRET was missing. This caused CI to fail with 367/368 tests passing.