Initial commit of Descrybe v2 without local scratch artifacts.

Drop one-shot tmp/axe scripts and agent i18n scratch so the Gitea tree is deployable.

apps/api/internal/httpapi/support_csat_auth_test.go

@@ -0,0 +1,43 @@
+package httpapi
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+)
+
+func TestRouterSupportCSATAuthRequiresSession(t *testing.T) {
+	t.Parallel()
+	s := testAPIServer()
+	h := s.Router()
+
+	cases := []struct {
+		method string
+		path   string
+	}{
+		{http.MethodPost, "/api/support/tickets/00000000-0000-0000-0000-000000000001/csat"},
+		{http.MethodGet, "/api/admin/support/csat"},
+	}
+	mounted := 0
+	for _, tc := range cases {
+		rec := httptest.NewRecorder()
+		req := httptest.NewRequest(tc.method, tc.path, strings.NewReader(`{"score":5}`))
+		if tc.method == http.MethodPost {
+			req.Header.Set("Content-Type", "application/json")
+		}
+		h.ServeHTTP(rec, req)
+		switch rec.Code {
+		case http.StatusNotFound:
+			continue
+		case http.StatusUnauthorized, http.StatusForbidden:
+			mounted++
+		default:
+			t.Fatalf("%s %s status=%d want 401/403 (body=%s)",
+				tc.method, tc.path, rec.Code, rec.Body.String())
+		}
+	}
+	if mounted == 0 {
+		t.Skip("csat routes not mounted yet")
+	}
+}