口径：受保护端点无 token 应返 401（=路由在线+鉴权生效）；404 才是端点缺失。
| 页 | 方法 | 路径 | 无token状态 | 后端定义 |
|---|---|---|---|---|
| A/B Login(态校验) | GET | /auth/me | 401 | auth.py:104 GET /me |
| A/B Login | POST | /auth/password-login | 422 | auth.py:141 |
| B Login(staging) | POST | /auth/login | 400 | auth.py:76(dev通道) |
| Bills | GET | /workbench/bills | 401 | miniapp_bills.py:82 |
| Bills详情 | GET | /workbench/bills/1 | 401 | miniapp_bills.py:127 |
| Orders | GET | /merchant-console/orders?page=1&page_size=1 | 401 | merchant_console.py GET /orders |
| Orders待接单 | GET | /merchant-console/orders/pending-confirm | 401 | merchant_console.py:239 |
| PaymentSettings | GET | /merchant-console/payment-mode | 401 | merchant_console.py:129 |
| Redeem/RedeemConfirm | POST | /workbench/redeem/scan | 401 | miniapp_workbench_redeem.py:121 |