fix(server): align connect route checks - #58258

…oute it dispatches to

1.19.4 skipped the password check for a request whose path matched the pattern of the terminal's
connect route and carried a ticket, leaving the ticket to that route's handler. 1.19.5 skips it only
when the server dispatches the request to that handler (anomalyco/opencode#58258). It also answers a
request of the TUI's worker that fails instead of leaving it waiting, updates the package of GitLab's
provider, which this repo does not use, and otherwise removes unused code.

Checked against 1.19.4 side by side on 2026-10-30: the overflow phrases and exclusions are the same
block byte for byte, max_tokens 32,000 and 182,000 on a fake endpoint with the same headers, the same
default permissions, --yolo still read as --auto, keys still masked, sessions read both ways, the
Agent tab through a copy of the relay with its terminal and its phone layer, and a shell command
naming an aliyuncs.com host refused under --yolo and under AGENT_AUTO's permission when a fake
endpoint asked for it. On the box's FP4-Local lane both sent the same request shapes, read
hello.txt with a tool and answered 7351. The x64 digest is GitHub's, checked against the download.

Co-Authored-By: Claude Opus 5.5 <[email protected]>