[MEDIUM] Response success/failure logic mismatch in chat auth handler

[ironclaw-ci]

[MEDIUM:95] Issue Found by Staging CI Review

Severity: MEDIUM
Confidence: 95/100
PR comment: #1246 (comment)

Description

Response success/failure logic mismatch in chat auth handler

---

Auto-created by staging-ci Claude Code review

[henrypark133]

Triage verdict: FALSE POSITIVE

Both chat_auth_token_handler and extensions_setup_submit_handler use identical success/failure logic:

let mut resp = if result.verification.is_some() || result.activated {
    ActionResponse::ok(result.message)
} else {
    ActionResponse::fail(result.message)
};

A pending verification returns ok() because the operation succeeded and now awaits async completion. This is consistent and intentional across both handlers.