00180f8f7d
WebSocket routes were getting require_active_plugin dependency applied via include_router(dependencies=[...]) which caused 403 Forbidden before the WebSocket upgrade could happen. Fix: Split router into HTTP routes (with dependency) and WebSocket routes (registered separately without the active-plugin check). WebSocket auth is handled inside the endpoint itself via session cookie verification.