Solve Turnstile once, get a cf_clearance cookie, and bypass WAF challenges for the session.
paulscouncil.com issues a Managed Challenge for any request to turnstile.paulscouncil.com/protected/*. Turnstile is configured with clearance_level: interactive, so once a visitor solves it, the resulting cf_clearance cookie automatically satisfies that WAF rule. No cookie is checked in Worker code - Cloudflare's edge handles enforcement before the request reaches this Worker.
Click below in a fresh incognito window (no existing cf_clearance cookie). You will hit the WAF managed challenge, solve it, and then land on the protected page.
Solve this widget first. It will drop a cf_clearance cookie with interactive level. Then the protected link above should load with no additional challenge - the cookie satisfies the WAF rule.