fix(security): protect skServer utility routes with auth

A route prefix mismatch registered the inputTest auth middleware for
/skServer/skServer/inputTest, leaving POST /skServer/inputTest
unauthenticated and letting unauthenticated callers drive the NMEA
parser engines. The nodeInfo, debugKeys and paths diagnostic endpoints
were also uncovered.

Correct the prefix and add auth middleware for the diagnostic routes.

Author: tkurki

src/tokensecurity.ts

@@ -765,7 +765,10 @@ function tokenSecurityFactory(
       '/webapps',
       '/availablePaths',
       '/hasAnalyzer',
-      '/skServer/inputTest'
+      '/inputTest',
+      '/nodeInfo',
+      '/debugKeys',
+      '/paths'
     ].forEach((p) =>
       app.use(`${SERVERROUTESPREFIX}${p}`, http_authorize(false))
     )