dev
main
- Skip internal API paths (/api/, /rest/, /backend/) from suspicious flagging - Remove broad .php match that caught Speedtest's garbage.php - Only flag 4xx on non-internal paths, ignore 5xx (service errors)