feat: i did a dumb

app/Http/Middleware/HeaderAuth.php

@@ -15,7 +15,7 @@ class HeaderAuth
      */
     public function handle(Request $request, Closure $next): Response
     {
-        if (hash_equals(config('bot.header_auth'), $request->header('X-BOTAUTH'))) {
+        if (!hash_equals(config('bot.header_auth'), $request->header('X-BOTAUTH'))) {
             return response('Unauthorized', 401);
         }