fix(auth): закрыть обход JWT через закодированные URL

docs/ux-ui/acceptance/auth211-profile-2026-10-13.json

@@ -0,0 +1,13 @@
+{
+  "date": "2026-10-13",
+  "block": "12.5.211",
+  "canonicalAuthCases": 42,
+  "commands": [
+    "npm --prefix backend run test:auth",
+    "npx tsx backend/src/plugins/auth.geoip.test.ts",
+    "npx tsx backend/src/plugins/auth.netflow-settings.test.ts"
+  ],
+  "passed": true,
+  "backendBuildPassed": true,
+  "scope": "Matched static/parameter routes, GET/HEAD/PATCH, OSPF read preview, public auth config/health, existing auth/GeoIP/private NetFlow export policy"
+}