CHW-1209 TurnstileChallengeFailed

Default message: Cloudflare Turnstile security check failed; refresh and retry, or disable browser extensions that block challenges
HTTP status: 403 (client)

Problem. A signup, org-create, or password-reset form was rejected because the Cloudflare Turnstile anti-abuse challenge did not pass. Cause. The Turnstile token was missing from the request, the token was rejected by Cloudflare, or the upstream verification endpoint errored — the response body uses a bare {"error":"..."} envelope because the affected forms parse that shape directly rather than the standard envelope. Fix. Refresh the page and retry, disable browser extensions that block challenge widgets, or — if the failure persists — confirm the operator’s Turnstile site key and secret. HTTP varies (400 missing, 403 rejected, 502 upstream).