DC-005: Fix all 138 broken test paths after src/ refactor

After the DC-005 module reorganization (41 files moved into src/ subdirs),
138 test suites failed because the refactor script's path-rewrite logic
missed three categories:

1. Files inside src/ doing 'require("./src/...")' — should be 'require("../...")'
2. Files in src/X/Y/ doing 'require("../../../src/...")' — should be 'require("../../...")'
3. Test files in __tests__/ with leftover 'require("../../../src/...")' paths

Root cause: the original refactor script ran before all files were moved,
so it computed relative paths against stale filesystem state.

Result:
- 30/30 test suites pass
- 879/879 tests pass (was: 18/30 suites, 614/687 tests)

Also fixed:
- routes/apps/restore.js: wrong responses import path
- routes/*/*.js: '../../src/utilities/X' → '../src/utilities/X' (depth 2 routes)

dashcaddy-installer/src/main/config-manager.js

@@ -6,7 +6,7 @@ const { REQUIRED_DIRS } = require('../shared/constants');
 let cryptoUtils;
 try {
   // Try to load from dashcaddy-api if available
-  cryptoUtils = require('../../dashcaddy-api/crypto-utils');
+  cryptoUtils = require('../../../src/security/crypto-utils');
 } catch {
   // Fallback: create minimal crypto implementation
   const crypto = require('crypto');