chore(release): 0.15.0 — operator authentication (version, CHANGELOG split, SW cache, test isolation)

tests/conftest.py

@@ -50,6 +50,20 @@ def _reset_portal_lockout():
     yield
 
 
+@pytest.fixture(autouse=True)
+def _operator_auth_off_by_default(monkeypatch):
+    """Pin the operator-auth gate OFF for every test, so the suite is deterministic
+    regardless of the container's OPERATOR_AUTH_ENABLED env (the dev container may
+    have it ON for manual testing). Tests that exercise the gate opt in via
+    wire_operator_auth(enabled=True), which overrides this within the test body."""
+    try:
+        import backend.operator_auth as _oa
+        monkeypatch.setattr(_oa, "OPERATOR_AUTH_ENABLED", False, raising=False)
+    except Exception:
+        pass
+    yield
+
+
 def make_project(db_session, name=None, **kwargs):
     """Insert and return a Project with a unique name."""
     p = models.Project(