I audited 12 startup stacks in 90 days. Here is what breaks before 1,000 users every single time.