The reporter asked that the regression test open the real /api/ws session
(#94119 step 4); the pin covered only the REST leg. Same test now also
connects `/api/ws?token=<ssh token>` under the public dashboard.public_url,
expects the `gateway.ready` announcement and a `session.list` result, and
asserts the token-less upgrade is closed 4401 (token mode, not the ticket
gate).
A/B: forcing the ticket gate inside `_ws_auth_reason` closes the upgrade
4401 and the test fails on the WS leg alone; `if False and
_desktop_loopback_auth_exempt(...)` at start_server fails it on the REST leg
with the reporter's body. Restored: passes. TestClient's WS default Host is
"testserver", so the upgrade carries the loopback Host header the renderer
sends.
7b7fc9c673