9ee84cc277
The router-level token_dep was intentionally removed (PR #2063) because it broke WebSocket upgrades. Update the structural test to assert the dependency is absent — auth is enforced by AuthGateMiddleware.