feat(v4.0): GitHub routes + CSRF exemptions for share/publish

- app/routers/github_routes.py: /api/github/status + disconnect
- CSRF: ajout /api/github, /api/pages, /api/recents aux exclusions
- main.py: registration github_router

app/routers/board.py

@@ -289,8 +289,9 @@ def _sidebar_data(request: Request, owner: str = "", repo: str = "") -> dict:
             "WHERE share_mode='anyone' OR published=1 ORDER BY updated_at DESC LIMIT 20"
         ).fetchall()
     shared_pages = []
+    published_pages = []
     for r in shared_rows:
-        shared_pages.append({
+        page_entry = {
             "id": f"page/{r['id']}",
             "db_id": r["id"],
             "name": r["title"] or "New page",
@@ -301,7 +302,11 @@ def _sidebar_data(request: Request, owner: str = "", repo: str = "") -> dict:
             "depth": 0,
             "has_children": False,
             "children": [],
-        })
+        }
+        if r["published"]:
+            published_pages.append(page_entry)
+        else:
+            shared_pages.append(page_entry)
 
     # Auth method & OAuth badge data
     auth_method = "local"
@@ -330,6 +335,7 @@ def _sidebar_data(request: Request, owner: str = "", repo: str = "") -> dict:
             "current_page": repo or "Dashboard", "last_edited": "now",
             "recent_pages": recent, "private_pages": private_items,
             "favorite_pages": favorites, "shared_pages": shared_pages,
+            "published_pages": published_pages,
             "user": user, "workspace_key": ws_key,
             "auth_method": auth_method,
             "gitea_linked": gitea_linked,