When unauthenticated (TOTP gate active), the dashboard was polling /api/v1/services/status every few seconds and reconnecting SSE every 2-8s indefinitely. Now: 401/403 sets _dcAuthLost flag to skip the polling interval entirely (no fallback to direct probes which misleadingly mark services as healthy), SSE exposes _sseClose() coordinated with _dcAuthLost, and queued refreshes are guarded.