Fix DC-005 depth-2 route path bugs: 67 broken requires across 21 files

The DC-005 src/ refactor left depth-2 route files (routes/auth/*,
routes/recipes/*, routes/apps/*, routes/arr/*, routes/config/*) with
broken require() paths. A filesystem-resolving scanner found 67 broken
requires across 21 files — three distinct bug classes:

  A) '../../../src/...' (3 levels up, above package root) — Bug 7, ~49 occurrences
  B) '../src/utils/...' (1 level up, resolves to nonexistent routes/src/) — ~15 occurrences
  C) routes/apps/restore.js:5 used utilities/responses (wrong dir) — should be utils/responses

All fixed to '../../src/...' (or '../../src/utils/responses' for class C).
routes/auth/totp.js was already fixed in the DC-006 commit.

Post-fix: 922/922 tests pass, zero new ESLint warnings. No logic changes —
purely mechanical require() path corrections.

dashcaddy-api/routes/config/assets.js

@@ -1,11 +1,11 @@
 const express = require('express');
 const fsp = require('fs').promises;
 const path = require('path');
-const { LIMITS } = require('../../../src/utilities/constants');
-const { exists } = require('../../../src/utilities/fs-helpers');
-const { ValidationError } = require('../../../src/utilities/errors');
+const { LIMITS } = require('../../src/utilities/constants');
+const { exists } = require('../../src/utilities/fs-helpers');
+const { ValidationError } = require('../../src/utilities/errors');
 const platformPaths = require('../../platform-paths');
-const { ok, successMessage } = require('../src/utils/responses');
+const { ok, successMessage } = require('../../src/utils/responses');
 /**
  * Config assets routes factory
  * @param {Object} deps - Explicit dependencies

dashcaddy-api/routes/config/backup.js

@@ -1,11 +1,11 @@
 const fsp = require('fs').promises;
 const fs = require('fs');
 const path = require('path');
-const { CADDY } = require('../../../src/utilities/constants');
-const { exists } = require('../../../src/utilities/fs-helpers');
-const { ValidationError, AuthenticationError } = require('../../../src/utilities/errors');
+const { CADDY } = require('../../src/utilities/constants');
+const { exists } = require('../../src/utilities/fs-helpers');
+const { ValidationError, AuthenticationError } = require('../../src/utilities/errors');
 const platformPaths = require('../../platform-paths');
-const { ok } = require('../src/utils/responses');
+const { ok } = require('../../src/utils/responses');
 
 /**
  * Config backup routes factory
@@ -380,7 +380,7 @@ module.exports = function(deps) {
     if (results.restored.includes('encryptionKey')) {
       try {
         // Clear the cached key so crypto-utils reloads from the new file on next use
-        const cryptoUtils = require('../../../src/security/crypto-utils');
+        const cryptoUtils = require('../../src/security/crypto-utils');
         if (typeof cryptoUtils.clearCachedKey === 'function') {
           cryptoUtils.clearCachedKey();
         }

dashcaddy-api/routes/config/settings.js

@@ -1,8 +1,8 @@
 const fsp = require('fs').promises;
-const { validateConfig } = require('../../../src/utilities/config-schema');
-const { exists } = require('../../../src/utilities/fs-helpers');
-const { ValidationError } = require('../../../src/utilities/errors');
-const { ok, successMessage } = require('../src/utils/responses');
+const { validateConfig } = require('../../src/utilities/config-schema');
+const { exists } = require('../../src/utilities/fs-helpers');
+const { ValidationError } = require('../../src/utilities/errors');
+const { ok, successMessage } = require('../../src/utils/responses');
 
 /**
  * Config settings routes factory