feat: Route service API calls through /api proxy instead of hardcoded…

[jamil314]

Removes hardcoded service URLs (API_GATEWAY_URL, AUTH_URL, CONFIG_API_URL, COUNTRY_CONFIG_URL, AUTH_API_URL) from window.config and replaces all direct service calls with relative /api/* paths routed through the nginx/vite proxy:

• apolloClient: /api/graphql (was window.config.API_GATEWAY_URL/graphql)
• client authApi: /api/auth/invalidateToken (was window.config.AUTH_URL)
• login authApi: /api/auth/authenticate, /api/auth/verifyCode, /api/auth/verifyUser, /api/auth/verifyNumber, /api/auth/verifySecurityAnswer, /api/auth/resendAuthenticationCode, /api/auth/changePassword, /api/auth/sendUserName (were window.config.AUTH_API_URL)
• login authApi: /api/config/publicConfig (was window.config.CONFIG_API_URL)
• login referenceApi: /api/countryconfig/content/login (was window.config.COUNTRY_CONFIG_URL)
• client referenceApi: /api/config/config, /api/config/publicConfig, /api/config/forms (were window.config.CONFIG_API_URL); /api/countryconfig/validators.js, /api/countryconfig/conditionals.js, /api/countryconfig/handlebars.js, /api/countryconfig/content/client (were window.config.COUNTRY_CONFIG_URL)

Also adds explicit /api/auth/ and /api/config/ proxy blocks to both nginx configs and vite dev proxies (previously only /api/ catch-all existed), converts LANGUAGES from comma-separated string to string[] in window.config, and updates all tests and storybook previews accordingly.

ToDo

• Remove LOGIN_URL

Description

Clearly describe what has been changed. Include relevant context or background.
Explain how the issue was fixed (if applicable) and the root cause.

Link this pull request to the GitHub issue (and optionally name the branch ocrvs-<issue #>)

Checklist

• I have linked the correct Github issue under "Development"
• I have tested the changes locally, and written appropriate tests
• I have tested beyond the happy path (e.g. edge cases, failure paths)
• I have updated the changelog with this change (if applicable)
• I have updated the GitHub issue status accordingly

[github-actions]

Oops! Looks like you forgot to update the changelog. When updating CHANGELOG.md, please consider the following:

• Changelog is read by country implementors who might not always be familiar with all technical details of OpenCRVS. Keep language high-level, user friendly and avoid technical references to internals.
• Answer "What's new?", "Why was the change made?" and "Why should I care?" for each change.
• If it's a breaking change, include a migration guide answering "What do I need to do to upgrade?".

[github-actions]

ℹ️ Coverage metrics explained:
• Statements — Executed code statements (basic logic lines)
• Branches — Tested decision paths (if/else, switch, ternaries)
• Functions — Functions invoked during tests
• Lines — Source lines executed

[github-actions]

📊 commons test coverage

Statements: 66.94%
Branches:   32.59%
Functions:  49.7%
Lines:      66.39%
Updated at: Thu, 05 Mar 2026 08:59:04 GMT

[github-actions]

📊 events test coverage

Statements: 86.82%
Branches:   85%
Functions:  93.2%
Lines:      86.82%
Updated at: Thu, 05 Mar 2026 09:01:10 GMT

[ocrvs-bot]

Your environment is deployed to https://ocrvs-11898.e2e-k8s.opencrvs.dev