Harden auth/vault path sanitization and clean WeKnora docs

scripts/task114-rust-web-gateway-entry-smoke.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 "use strict";
 
+const { loginViaAuthForm } = require('./lib/browser-auth-login');
 const assert = require("node:assert");
 const { spawn } = require("node:child_process");
 const net = require("node:net");
@@ -114,7 +115,10 @@ async function validateGateway(baseUrl) {
   assert.match(authText, /data-mnote-shell="auth"/);
   assert.match(authText, /账号登录/);
   assert.match(authText, /邮箱或用户名/);
-  assert.match(authText, /测试账号快速登录/);
+  assert.doesNotMatch(authText, /测试账号快速登录/);
+  assert.doesNotMatch(authText, /data-auth-test-login/);
+  assert.doesNotMatch(authText, /data-test-password/);
+  assert.match(authText, /data-auth-submit/);
   assert.doesNotMatch(authText, /隐私政策|使用\s*Google|使用\s*GitHub|第三方快捷/iu);
 
   const root = await fetchWithTimeout(`${baseUrl}/`);