Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@auth/middleware/middleware_test.go`:
- Line 10: The test imports the wrong major version of commons log causing type
mismatch with AuthClient.Logger; change the import from
"github.com/LerianStudio/lib-commons/v2/commons/log" to the v3 module (matching
production), and update any testLogger methods (the ones returning log.Logger)
to use the v3 log.Logger type so their return types match AuthClient.Logger.

In `@auth/middleware/middlewareGRPC_test.go`:
- Around line 60-66: The test and middleware currently treat an "Authorization:
Bearer " header as the literal "Bearer" token, which hides a parsing bug; update
the token-parsing logic (stripBearer) so that when the header is exactly the
bearer prefix with no token (e.g., "Bearer " or "bearer ") it returns an empty
string, and update the GRPC auth middleware handler (the code path that inspects
the token and maps to gRPC status) to treat an empty token as unauthenticated
and return codes.Unauthenticated rather than proceeding; also change the failing
tests in middlewareGRPC_test.go (including the case named
"bearer_prefix_with_no_token_returns_bearer_literal" and similar cases around
lines referenced) to expect an empty credential and an Unauthenticated outcome.

In `@auth/middleware/middlewareGRPC.go`:
- Around line 102-121: Extract the duplicated MULTI_TENANT_ENABLED + metadata
mutation block into a single helper function (e.g., propagateTenantClaims(ctx
context.Context, token *jwt.Token) context.Context) in middlewareGRPC.go; move
the os.Getenv("MULTI_TENANT_ENABLED") check, tenant extraction
(extractTenantClaims), metadata.Copy/Set calls for "md-tenant-id",
"md-tenant-slug", "md-tenant-owner", and metadata.NewIncomingContext into that
helper, and then replace the duplicated blocks in both the unary interceptor and
streaming interceptor with a call to propagateTenantClaims(ctx, token) (or
similar) to return the updated context. Ensure the helper handles empty claim
values and returns the original context when multi-tenant is disabled or no
tenant claims are present.

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@auth/middleware/middleware_test.go`:
- Around line 436-449: Update the TestAuthResponse_JSONRoundTrip to include the
Timestamp field: import "time", set original.Timestamp (e.g., time.Now().UTC()),
marshal/unmarshal as before, and assert that decoded.Timestamp equals
original.Timestamp using time.Time's Equal method (or compare UnixNano) to
ensure the full struct round-trip is covered; reference the
TestAuthResponse_JSONRoundTrip function and the AuthResponse.Timestamp field
when making the change.

In `@auth/middleware/middleware.go`:
- Around line 59-64: The wrapped error is created but never emitted; update the
error branch after calling zap.InitializeLoggerWithError() so the failure is
logged before falling back to &log.NoneLogger{} (e.g., wrap the error with
fmt.Errorf("failed to initialize logger: %w", err) and write it to stderr with
fmt.Fprintln(os.Stderr, wrappedErr) or similar), and add the "os" import; ensure
you still assign l = &log.NoneLogger{} afterwards so InitializeLoggerWithError,
l, and log.NoneLogger are used correctly.

Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@auth/middleware/middleware.go`:
- Around line 60-65: The current error handling assigns l = &log.NoneLogger{}
before calling l.Errorf, so the initialization error is never emitted; change
the sequence so you write the error directly to stderr (e.g., use
fmt.Fprintf(os.Stderr, ...) or log.Print to os.Stderr) immediately after
zap.InitializeLoggerWithError() returns an error, then assign the fallback l =
&log.NoneLogger{} afterward; update the imports to include "os" (and "fmt" if
using fmt.Fprintf) and replace the l.Errorf(...) call with a direct stderr write
referencing the error from InitializeLoggerWithError() so the failure context is
preserved.