perf(html): replace proxyAuth with getToken to remove set-cookie; add Cache-Control per auth state

src/lib/proxy-access.ts

@@ -1,4 +1,5 @@
 export interface ProxyToken {
+	sub?: string;
 	rank?: unknown;
 }
 

src/lib/proxy-auth-contract.test.ts

@@ -2,14 +2,12 @@ import { readFileSync } from "node:fs";
 import { describe, expect, it } from "vitest";
 
 describe("proxy authentication boundary", () => {
-	it("uses a database-free Auth.js decoder", () => {
+	it("uses getToken directly without database-dependent Auth.js config", () => {
 		const proxy = readFileSync("src/proxy.ts", "utf8");
-		const proxyAuth = readFileSync("src/lib/proxy-auth.ts", "utf8");
 
-		expect(proxy).toContain('from "@/lib/proxy-auth"');
+		expect(proxy).not.toContain('from "@/lib/proxy-auth"');
 		expect(proxy).not.toContain('from "@/lib/auth"');
-		expect(proxyAuth).not.toMatch(
-			/from\s+["'][^"']*(db|site-settings|credentials|prisma)[^"']*["']/i,
-		);
+		expect(proxy).toContain("getToken");
+		expect(proxy).toContain("next-auth/jwt");
 	});
 });