EUVD-2026-97830

Nginx UI OTP secure-session step-up is missing on sensitive mutation routes...