fix: Clerk JWT verification and Inngest dev config

- Fix VerifyTokenOptions passing empty string instead of None for jwt_key,
  which caused the Clerk SDK to skip JWKS remote fetch and fail with
  "Failed to resolve JWK" on every authenticated request (401)
- Remove INNGEST_DEV=1 from docker-compose.dev.yml so local dev uses
  production Inngest credentials from .env

Author: iamjr15

backend/utils/auth_utils.py

@@ -50,8 +50,8 @@ async def _verify_clerk_jwt(token: str) -> dict:
         if config.CLERK_SECRET_KEY or config.CLERK_JWT_KEY:
             # Keys configured — verify signature, fail-closed
             options = VerifyTokenOptions(
-                secret_key=config.CLERK_SECRET_KEY or "",
-                jwt_key=config.CLERK_JWT_KEY or "",
+                secret_key=config.CLERK_SECRET_KEY,
+                jwt_key=config.CLERK_JWT_KEY,
             )
             return await asyncio.to_thread(verify_token, token, options)
         # No keys — dev convenience mode
@@ -61,8 +61,8 @@ async def _verify_clerk_jwt(token: str) -> dict:
     # PRODUCTION mode: enforce signature verification
     if config.CLERK_SECRET_KEY or config.CLERK_JWT_KEY:
         options = VerifyTokenOptions(
-            secret_key=config.CLERK_SECRET_KEY or "",
-            jwt_key=config.CLERK_JWT_KEY or "",
+            secret_key=config.CLERK_SECRET_KEY,
+            jwt_key=config.CLERK_JWT_KEY,
         )
         # verify_token() does synchronous HTTP I/O (JWKS fetch) when jwt_key is absent,
         # so run in a thread to avoid blocking the async event loop.

docker-compose.dev.yml

@@ -15,7 +15,6 @@ services:
       - ENV_MODE=local
       - REDIS_URL=redis://redis:6379
       - PYTHONUNBUFFERED=1
-      - INNGEST_DEV=1
     depends_on:
       redis:
         condition: service_healthy