Merge feature/dc-061-websocket-auth: HMAC-verify dashboard WS auth + listener isolation

dashcaddy-api/server.js

@@ -75,7 +75,7 @@ process.on('uncaughtException', (error) => {
       // .on() on a class threw on every boot and silently killed the WS).
       try {
         const { ctx } = app.locals;
-        const createDashboardWS = require('./src/websocket/dashboard-ws').createDashboardWS;
+        const createDashboardWS = require('./src/websocket/dashboard-ws');
 
         // DC-061: WS upgrade bypasses Express middleware, so inject the
         // real session verifier from the shared context. Without this

dashcaddy-api/src/websocket/dashboard-ws.js

@@ -331,6 +331,4 @@ function createDashboardWS(server, deps = {}) {
   };
 }
 
-module.exports = createDashboardWS;
-module.exports.createDashboardWS = createDashboardWS;
-module.exports.parseCookieHeader = parseCookieHeader;
+module.exports = { createDashboardWS, parseCookieHeader };