fix: harden SAC security per audit (0.4.15)

Close audit findings: anti-spoof client IP for login rate limit, JWT/CORS
enforce on startup, SSH host-key verification and sudo via stdin, optional
WinRM HTTPS, SSE httpOnly cookie auth, ingest body limit, ILIKE escaping,
and HMAC API key hashing with legacy SHA-256 fallback.

frontend/src/views/DashboardView.vue

@@ -1,4 +1,4 @@
-<template>
+<template>
   <div class="overview-page">
       <h1>Обзор</h1>
 
@@ -556,7 +556,7 @@ function connectLive() {
 
   eventSource?.close();
 
-  const url = `/api/v1/stream/events?token=${encodeURIComponent(token)}`;
+  const url = `/api/v1/stream/events`;
 
   eventSource = new EventSource(url);