Public-route allow-list — keep it in sync when adding domains2026-05-26#public route#allow-list#auth gate#middleware