014de026eb
- Add /api/onboarding and /status to PUBLIC_PATHS in hooks.server.ts so onboarding wizard and status page work for unauthenticated users - Add isOnboardingNeeded() guard to POST /api/onboarding to reject calls after onboarding is complete (security hardening) - Add data-app-widget attribute to all AppWidget card variants to enable j/k keyboard navigation