45189e2748
Login route reads config.yml for credentials but it is gitignored. Session-scoped autouse fixture now writes a minimal config.yml to a temp path and patches settings.config_path so test_scan.py auth fixtures work in CI without a real config file.