fix: restore PATCH endpoints used by E2E + emergency-token fallback

register PATCH /api/v1/settings and PATCH /api/v1/security/acl (E2E expectations)
add emergency-token-aware shortcut handlers (validate X-Emergency-Token → set admin context → invoke handler)
preserve existing POST handlers and backward compatibility
rebuild & redeploy E2E image, verified backend build success
Why: unblocked failing Playwright E2E tests that returned 404s and were blocking the hotfix release

scripts/validate-e2e-auth.sh

@@ -24,7 +24,7 @@ echo "✅ PLAYWRIGHT_BASE_URL is localhost or unset (defaults to localhost)"
 # Check 2: Verify Docker container is running
 if ! docker ps | grep -q charon-e2e; then
   echo "⚠️ charon-e2e container not running. Starting..."
-  docker compose -f .docker/compose/docker-compose.e2e.yml up -d
+  docker compose -f .docker/compose/docker-compose.playwright-local.yml up -d
   echo "Waiting for container health..."
   sleep 10
 fi