== Part A live, hub 0.135.0, 2026-10-05T09:15:34Z, ClusterIP, Basic auth (password from the credentials file, not printed)
POST /configuration/global-floor, Basic, NO header, Origin evil (empty form): 403
POST /no-such-route, Basic, NO header: 403
POST /no-such-route, Basic + X-Felhom-Operator: cli (passes the gate → router 404): 404
POST /no-such-route, header but NO credentials: 401
GET /system, Basic, no header: 200
2026/10/05 11:15:34 [WARN] CSRF rejected: POST /configuration/global-floor from 10.42.0.1:36344
2026/10/05 11:15:34 [WARN] CSRF rejected: POST /no-such-route from 10.42.0.1:41323
