feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

- Remove legacy /api/ mount; all routes now under /api/v1/ only
- Update path matchers (CSRF excludes, public routes, audit log, rate limits)
- Move standalone routes (/api/network/ips, /api/docs, /api/docs/spec) to v1
- Update openapi.yaml (110 paths), CA pages, and 4 lingering frontend files
- Add LICENSE (proprietary EULA), CHANGELOG.md (Keep a Changelog format)
- Add .gitea/workflows/ci.yml (test+lint and security audit jobs)
- Fix 9 pre-existing no-empty lint errors so CI starts green
- Drop ad-hoc scratch reports and *.bak files from repo root

All 739 jest tests pass. Lint is clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

dashcaddy-api/ca/CERTIFICATE-API.md

@@ -16,7 +16,7 @@ DashCA now provides automatic SSL certificate generation for services on your ne
 
 ### 1. Generate/Download Certificate
 
-**GET** `/api/ca/cert/:domain`
+**GET** `/api/v1/ca/cert/:domain`
 
 Generate and download an SSL certificate for the specified domain.
 
@@ -52,7 +52,7 @@ Invoke-WebRequest -Uri "https://ca.sami/api/ca/cert/dns1.sami?format=pfx" -OutFi
 
 ### 2. List Generated Certificates
 
-**GET** `/api/ca/certs`
+**GET** `/api/v1/ca/certs`
 
 List all generated certificates with their status and expiration information.