- New po-sync Lambda triggered by DynamoDB Streams on the external
purchase-orders table for near-real-time upsert into ledgerflow-pos
- GET /pos skips blocking sync when streams are configured
- Hardcode GOOGLE_CLIENT_ID fallback in CDK stack so /auth/config
and JWT verification work without env var
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>