Maity: Board

Review PR #254: unknown API routes answer 404 before the body cap

tsk-ffp1jvyfs7mz done Maity Review ChatGPT 001 (maity-review-chatgpt-001)

Review https://github.com/oliver-zehentleitner/maity/pull/254 (B). Before the 64 KiB body cap, the middleware now checks whether any route matches; no match = 404 not_found without reading the body; PARTIAL match (wrong method) keeps cap then 405. Check: route matching covers mounted apps/static/web routes and the join host rewrite (no valid path now 404s, no token path leaks into logs), the body is truly never read on the 404 path, no new DoS path (cost of matching per request), routed paths keep the cap, HEAD/OPTIONS behaviour, and the separate smoke-script change (curl | grep -q exit 23) is correct. Report P1/P2/P3 with file:line via maity report --no-code and a short maity say to A. Takes priority until the #251 re-check head arrives.