feat: 1.5.0 prep — API v1 cutover, LICENSE, CHANGELOG, CI

- Remove legacy /api/ mount; all routes now under /api/v1/ only
- Update path matchers (CSRF excludes, public routes, audit log, rate limits)
- Move standalone routes (/api/network/ips, /api/docs, /api/docs/spec) to v1
- Update openapi.yaml (110 paths), CA pages, and 4 lingering frontend files
- Add LICENSE (proprietary EULA), CHANGELOG.md (Keep a Changelog format)
- Add .gitea/workflows/ci.yml (test+lint and security audit jobs)
- Fix 9 pre-existing no-empty lint errors so CI starts green
- Drop ad-hoc scratch reports and *.bak files from repo root

All 739 jest tests pass. Lint is clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

dashcaddy-api/ca/README.md

@@ -113,7 +113,7 @@ The landing page (`index.html`) includes:
 - **DashCaddy Theme:** Dark mode with Sami Grotesk font
 
 **API Integration:**
-- Loads certificate info from `/api/ca/info` endpoint
+- Loads certificate info from `/api/v1/ca/info` endpoint
 - Falls back to static info if API unavailable
 
 ## Development Workflow
@@ -234,7 +234,7 @@ Returns CA expiration health status:
 
 **Symptom:** Certificate info stuck on loading state
 **Cause:** API endpoint not accessible
-**Solution:** Check that dashcaddy-api server is running and `/api/ca/info` responds
+**Solution:** Check that dashcaddy-api server is running and `/api/v1/ca/info` responds
 
 ## Testing Checklist