Avoid treating dashboard-only OK as storefront HTTPS success. Co-authored-by: Cursor <cursoragent@cursor.com>