[VULN-27] Git Status Endpoint Information Disclosure

[lyncmi07]

Severity: Low
Affected location: routes/git_websites.ts:89-96

Issue:
GET /api/websites/:domain/git/status is unauthenticated and returns git metadata, potentially exposing repository URLs and sensitive context.

Mitigation plan:

1. Require authentication and website ownership checks.
2. Redact sensitive fields in response.
3. Return minimal status fields needed by UI.

Verification / tests:

• Tests that unauthenticated requests are rejected.
• Tests that non-owners cannot view status.
• Tests that sensitive URL/credential fields are not returned.