Registers the auth-status + password-login + logout + guard routes. Each route
derives a live runtime from the boot runtime + the current config in the store
(resolveLiveRuntime), so an auth-mode or credential change saved via the
UI applies on the next request without a restart. Host/port/session secret stay
boot-pinned (a live server cannot rebind or rotate its cookie key).
Registers the auth-status + password-login + logout + guard routes. Each route derives a live runtime from the boot runtime + the current config in the store (resolveLiveRuntime), so an auth-mode or credential change saved via the UI applies on the next request without a restart. Host/port/session secret stay boot-pinned (a live server cannot rebind or rotate its cookie key).