fix(vikon): DNS bypass, OAuth callback, ABITUR init, token cache, ZIP security

- Add CURLOPT_RESOLVE DNS bypass for db-nica.ru / file.db-nica.ru
- Add OAuth callback route with CSRF state validation
- Add /authorize endpoint to generate OAuth URL with state
- Add ABITUR special case: init empty module core without ZIP download
- Add token validation caching (150s) to reduce API calls
- Block PHP/PHTML/PHAR files inside ZIP before extraction
- Add VikonTokenRefresh middleware for auto token refresh
- Add vikon.refresh middleware alias to Kernel

app/Http/Kernel.php

@@ -89,6 +89,7 @@ class Kernel extends HttpKernel
         'dashboard.auth' => \App\Containers\Dashboard\UI\WEB\Middleware\EnsureDashboardAuthenticated::class,
         'limit.post' => LimitPost::class,
         'form.time.period' => FormTimePeriodMiddleware::class,
+        'vikon.refresh' => \App\Http\Middleware\VikonTokenRefresh::class,
 
     );
 }