Mechanical reformat — no logic changes. 398 files changed, 19125 insertions(+), 16457 deletions(-). Prettier 3.8.4 with .prettierrc (singleQuote:true, semi:true, tabWidth:2, trailingComma:all, printWidth:100). Isolated per D-13-08 for reviewability.
- Register app.get('/api/login', redirect to '/') in protected-routes block - Route placed after OIDC guard so unauthenticated nav triggers auth flow - Add login.test.ts covering bypass and OIDC-passthrough redirect paths