A failing job that starts with auth can still be a missing env var. I check the variable name before chasing credentials.