test(production): align smoke with Turnstile gates

[StringKe]

Summary

• align production Site and Console assertions with canonical deployed routes and SEO metadata
• treat configured Turnstile as an honest SKIP boundary for policy probes while still verifying fail-closed responses and zero side effects
• ignore the flow-scoped guest capability when comparing otherwise stable auth config
• avoid three unnecessary 45-second audit polls when CAPTCHA blocks the underlying policy

Verification

• pnpm check
• pnpm test
• pnpm run security:secret-scan
• production smoke: PASS in 131.85s with CAPTCHA-dependent policy probes reported as SKIP
• all 36 Console routes redirect unauthenticated users to Hosted Sign-in with the original continue path