fix(vikon): DNS bypass, OAuth callback, ABITUR init, token cache, ZIP security

- Add CURLOPT_RESOLVE DNS bypass for db-nica.ru / file.db-nica.ru
- Add OAuth callback route with CSRF state validation
- Add /authorize endpoint to generate OAuth URL with state
- Add ABITUR special case: init empty module core without ZIP download
- Add token validation caching (150s) to reduce API calls
- Block PHP/PHTML/PHAR files inside ZIP before extraction
- Add VikonTokenRefresh middleware for auto token refresh
- Add vikon.refresh middleware alias to Kernel

config/vikon.php

@@ -17,6 +17,10 @@ return [
 
     'storage_path' => storage_path('app/vikon'),
 
+    'domain_resolve' => env('VIKON_DOMAIN_RESOLVE', false),
+    'vikon_domain_resolve_ip' => env('VIKON_DOMAIN_RESOLVE_IP', '62.76.112.192'),
+    'fm_domain_resolve_ip' => env('VIKON_FM_DOMAIN_RESOLVE_IP', '62.76.112.192'),
+
     'modules' => [
         1 => [
             'name' => 'Сведения',