fix: page viewer access and more (#2743) master
* fix: page viewer access and more * fix: address review feedback - check page access before the pending-subscription lookup - report failed grafana-oncall and ntfy test sends - webhook delivery never follows redirects - align query password handling across procedures - isolate and tighten tests Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: address second round of review feedback - follow same-host 307/308 redirects for outbound webhooks - share the page access cookie key from a single source - make the domain router tests cover the path encoding Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: only follow webhook redirects to the same service Same host and port, and never from https to http. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>