feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

- Remove legacy /api/ mount; all routes now under /api/v1/ only
- Update path matchers (CSRF excludes, public routes, audit log, rate limits)
- Move standalone routes (/api/network/ips, /api/docs, /api/docs/spec) to v1
- Update openapi.yaml (110 paths), CA pages, and 4 lingering frontend files
- Add LICENSE (proprietary EULA), CHANGELOG.md (Keep a Changelog format)
- Add .gitea/workflows/ci.yml (test+lint and security audit jobs)
- Fix 9 pre-existing no-empty lint errors so CI starts green
- Drop ad-hoc scratch reports and *.bak files from repo root

All 739 jest tests pass. Lint is clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

dashcaddy-api/backup-manager.js

@@ -740,7 +740,7 @@ class BackupManager extends EventEmitter {
         size: data.length
       };
     } finally {
-      try { await client.end(); } catch (_) {}
+      try { await client.end(); } catch (_) { /* ignore */ }
     }
   }
 
@@ -759,7 +759,7 @@ class BackupManager extends EventEmitter {
       const buffer = await client.get(location.path);
       return Buffer.isBuffer(buffer) ? buffer : Buffer.from(buffer);
     } finally {
-      try { await client.end(); } catch (_) {}
+      try { await client.end(); } catch (_) { /* ignore */ }
     }
   }
 
@@ -786,7 +786,7 @@ class BackupManager extends EventEmitter {
       // Delete the probe
       try {
         await this._deleteFromDestination(location);
-      } catch (_) {}
+      } catch (_) { /* ignore */ }
 
       const elapsed = Date.now() - start;
       return {
@@ -817,14 +817,14 @@ class BackupManager extends EventEmitter {
       const { Dropbox } = require('dropbox');
       const creds = await this._getCloudCredentials('dropbox');
       const dbx = new Dropbox({ accessToken: creds.token });
-      try { await dbx.filesDeleteV2({ path: location.path }); } catch (_) {}
+      try { await dbx.filesDeleteV2({ path: location.path }); } catch (_) { /* ignore */ }
       return;
     }
     if (location.type === 'webdav') {
       const { createClient } = require('webdav');
       const creds = await this._getCloudCredentials('webdav');
       const client = createClient(creds.url, { username: creds.username, password: creds.password });
-      try { await client.deleteFile(location.path); } catch (_) {}
+      try { await client.deleteFile(location.path); } catch (_) { /* ignore */ }
       return;
     }
     if (location.type === 'sftp') {
@@ -839,9 +839,9 @@ class BackupManager extends EventEmitter {
           password: creds.password || undefined,
           privateKey: creds.privateKey || undefined
         });
-        try { await client.delete(location.path); } catch (_) {}
+        try { await client.delete(location.path); } catch (_) { /* ignore */ }
       } finally {
-        try { await client.end(); } catch (_) {}
+        try { await client.end(); } catch (_) { /* ignore */ }
       }
       return;
     }
@@ -895,7 +895,7 @@ class BackupManager extends EventEmitter {
             recovered = true;
             console.log(`[BackupManager] Loaded backup from fallback location ${backup.locations[i].type}`);
             break;
-          } catch (_) {}
+          } catch (_) { /* ignore */ }
         }
         if (!recovered) throw loadErr;
       }