Fix catch-all route, SSE auth via query token, and live progress SSE connections

src/server/public/app.js

@@ -220,6 +220,11 @@ async function loadJobs() {
   try {
     const data = await apiJson('GET', '/api/jobs');
     renderJobs(data.jobs);
+    data.jobs.forEach(j => {
+      if (j.status === 'processing' || j.status === 'queued') {
+        connectSSE(j.id);
+      }
+    });
   } catch (err) {
     console.error(err);
   }
@@ -432,7 +437,7 @@ async function loadConfigDefaults() {
 const sseConnections = {};
 function connectSSE(jobId) {
   if (sseConnections[jobId]) return;
-  const source = new EventSource(`/api/jobs/${jobId}/progress`);
+  const source = new EventSource(`/api/jobs/${jobId}/progress?token=${encodeURIComponent(authToken)}`);
   source.onmessage = (event) => {
     const data = JSON.parse(event.data);
     updateJobCard(jobId, data);