Removes the legacy server-rendered UI now that the React SPA covers everything:
- delete old HTML/form handlers (admin, auth, drivers, vehicles HTML) + templates/
- routes: drop /, /login, /admin/*, /stats, /profile, /load-more, old /sse/passages,
/logout; keep only the /api/* surface (+ public /health, /thumbnail, webhooks, gate API)
- middleware: Bearer-only (cookie + token-refresh-cookie removed); 401 JSON on failure
- /thumbnail moved to public (loaded by <img>, no Bearer header)
- passage broadcast is JSON-only now (drop the HTML passage_tx channel)
- remove askama/askama_web deps + static/js + static/css
- Dockerfile: add bun frontend build stage, serve dist/ (no templates)
- tests: delete old HTML tests (auth_test, api_test), repoint api_auth bearer test,
rewrite camera delete test for hard-remove, update 404 test for SPA fallback
Kept for deferred SPA features / infra: alert + passage-history repo methods, email service.
All 64 API/repo integration tests green; offline build clean.
Alexandre Possebom
6322305baf
