NextAuth catches all /api/auth/* routes via [...nextauth] catch-all. Move the Traefik forwardAuth endpoint to /api/theia-auth to avoid the conflict. Traefik dynamic config updated to match. Co-authored-by: Cursor <cursoragent@cursor.com>