fix(settings): the routing endpoint belongs to the operator

routing_base_url arrived on this branch and was assigned to neither managed
set, which MANAGED-KEYS-001 exists to catch. It is locked, alongside the other
infrastructure endpoints: the host it names is folded into the CSP once at boot
(routingCspOrigins), so a customer who repoints it lands in a policy that does
not know their router and the browser blocks the requests with nothing to
catch. MANAGED-KEYS-005 pins the list verbatim and is updated with it.

server/tests/unit/nest/managed-keys.test.ts

@@ -62,6 +62,7 @@ describe('managed key assignment', () => {
       'oidc_login',
       'oidc_registration',
       'openweather_api_key',
+      'routing_base_url',
       'smtp_from',
       'smtp_host',
       'smtp_pass',