The hackathon_auth_middleware requires Arc<PgPool> from Extension, but was applied as the outermost layer (running before Extension(pool) was injected). Swapped layer order so pool Extension is outermost, making it available when the auth middleware runs. Fixes 500 errors on all /v1/hackathon/* authenticated endpoints. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>