feat: add authentication protected encyclopedia routing, update relevant documents and configurations

AGENTS.md

@@ -37,8 +37,8 @@
 | `/` | MapView | No |
 | `/login`, `/register`, `/forgot-password`, `/auth/confirm`, `/auth/reset-password` | Auth views | No |
 | `/upload` | UploadView | Yes |
-| `/encyclopedia` | EncyclopediaView | No |
-| `/encyclopedia/:id` | CloudTypeView | No |
+| `/encyclopedia` | EncyclopediaView | Yes |
+| `/encyclopedia/:id` | CloudTypeView | Yes |
 | `/gallery` | GalleryView | No |
 | `/community` | CommunityView | No |
 | `/profile` | ProfileView (own) | Yes |
@@ -109,7 +109,8 @@
 ## Build & Deploy
 
 - **Vercel** with `vercel.json`: SPA rewrites, security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). No CSP or HSTS configured.
-- **SEO plugin** in `vite.config.ts`: generates `robots.txt` and `sitemap.xml` at build time. Disallows `/admin`, `/auth/`, `/login`, `/register`, `/upload`, `/profile/settings`.
+- Vite dev and preview servers both use strict port `5173`, matching the backend's default `CORS_ORIGINS` and `FRONTEND_URL`.
+- **SEO plugin** in `vite.config.ts`: generates `robots.txt` and `sitemap.xml` at build time. Auth-only routes, including `/encyclopedia`, are excluded from the sitemap and disallowed in `robots.txt`.
 - **`lib/canvas.ts`**: patches `HTMLCanvasElement.getContext('2d')` to always pass `willReadFrequently: true` — needed for the badge card renderer in `lib/cloudBadges.ts`.
 
 ## Environment Variables