This process cannot see BETTER_AUTH_SECRET. Frontal OS refuses every action until both are set. Put them in apps/web/.env.local (see apps/web/.env.local.example) and restart the server. Values are never shown here.