<?php
// =============================================================================
// includes/debug_constants.php
//
// Support token for debug.php. Passed as ?key=<TOKEN> in the URL. Without a
// matching token, debug.php returns a 404 with no body — buyers can't tell
// the endpoint exists.
//
// Rotate this by editing the string below. hash_equals() is used on the
// server so timing attacks aren't a concern.
// =============================================================================

return [
    'SUPPORT_TOKEN' => 'b3s-ibopro-support-2026-rot-me-if-leaked',
];
