Squashed commit of the following:

commit b5a751005850115c84fd8fddb83f32a52835a422
Author: fuomag9 <1580624+fuomag9@users.noreply.github.com>
Date:   Sat Nov 8 13:54:22 2025 +0100

    Update ProxyHostsClient.tsx

commit c93b3898c31b9c206fba74605dad5a578e326ce4
Author: fuomag9 <1580624+fuomag9@users.noreply.github.com>
Date:   Sat Nov 8 13:43:00 2025 +0100

    test-protected-paths

app/(dashboard)/proxy-hosts/ProxyHostsClient.tsx

@@ -658,6 +658,18 @@ function AuthentikFields({ authentik }: { authentik?: ProxyHost["authentik"] | n
               size="small"
               fullWidth
             />
+            <TextField
+              name="authentik_protected_paths"
+              label="Protected Paths (Optional)"
+              placeholder="/secret/*, /admin/*"
+              helperText="Leave empty to protect entire domain. Specify paths to protect specific routes only."
+              defaultValue={initial?.protectedPaths?.join(", ") ?? ""}
+              disabled={!enabled}
+              multiline
+              minRows={2}
+              size="small"
+              fullWidth
+            />
             <HiddenCheckboxField
               name="authentik_set_host_header"
               defaultChecked={setHostHeaderDefault}