Function router 

pub fn router(state: AppState) -> Router

Build the API router: open reads, password-gated writes, and — when the dashboard feature is on — the embedded SPA as the fallback.