fix(ssr): remove spider-only gate — serve full SSR to all users

The CSR shell served to regular browsers caused a visible blank-to-content
flash: the browser painted an empty <app-root>, then waited for Angular
to bootstrap and lazy-load the route before any content appeared.

All requests now route through the Angular SSR engine (appEngine.handle()),
which fetches fresh station config from the API via APP_INITIALIZER before
rendering. The first paint carries real content, colors, and assets.

server.spec.ts

@@ -33,28 +33,26 @@ vi.mock('./angular-app-engine-manifest.mjs', () => ({
 }));
 
 describe('SSR server — server.ts', () => {
-  it('should export a request handler', async () => {
+  it('should route all requests through Angular SSR engine (no spider gate)', async () => {
+    const fs = require('fs');
+    const content = fs.readFileSync('./server.ts', 'utf-8');
+    expect(content).toContain('requestHandler(req, res,');
+    // Should NOT have spider-only SSR gate
+    expect(content).not.toContain('if (!isSpider(userAgent))');
+    expect(content).not.toContain('isSpider');
+  });
+
+  it('should still have serveCsrShell as a fallback for when SSR engine fails', async () => {
+    const fs = require('fs');
+    const content = fs.readFileSync('./server.ts', 'utf-8');
+    expect(content).toContain('serveCsrShell');
+  });
+
+  it('should have request handler export', async () => {
     const mod = await import('./server');
     expect(mod.requestHandler).toBeDefined();
   });
 
-  it('should have spider detection imports and serveCsrShell', async () => {
-    const fs = require('fs');
-    const content = fs.readFileSync('./server.ts', 'utf-8');
-    expect(content).toContain('isSpider');
-    expect(content).toContain('getUserAgent');
-    expect(content).toContain('serveCsrShell');
-    expect(content).toContain('spider_detection');
-  });
-
-  it('should gate SSR behind spider detection', async () => {
-    const fs = require('fs');
-    const content = fs.readFileSync('./server.ts', 'utf-8');
-    // Verify the spider detection gate exists
-    expect(content).toContain("if (!isSpider(userAgent))");
-    expect(content).toContain('serveCsrShell(res)');
-  });
-
   it('should inject fresh station config as window.__STATION_CONFIG', async () => {
     const fs = require('fs');
     const content = fs.readFileSync('./server.ts', 'utf-8');