Remove -s (silent) from curl so CI logs show the HTTP response on failure. Add logger.error in requireCronSecret so 401s from bad/missing secrets appear in Sentry. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>