hub v0.153.0: off-site and PBS-DR re-issues session only too (R-1059 = A, operator 2026-10-15); R-1059 closed

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb

documentation/audits/hub-tokens-2026-10-15/red-proof/15-offsite-reissue.txt

@@ -0,0 +1,6 @@
+=== RUN   TestToken_CredentialAndLinkRoutesAreSessionOnly
+    tokens_test.go:582: POST /configs/c1/offsite-reissue (resets the household's off-site password) with an all-scope token: 502 "Offsite provisioning is not configured on this hub\n", want 403 session only
+--- FAIL: TestToken_CredentialAndLinkRoutesAreSessionOnly (0.05s)
+FAIL
+FAIL	gitea.dooplex.hu/admin/felhom-hub/internal/web	0.077s
+FAIL