#568 [MEDIUM] Public endpoint lists scattered across files

PUBLIC_PATHS and skip-auth endpoint lists are defined in multiple places (rbac.py, auth.py) leading to potential inconsistencies. Fix: Centralize public endpoint configuration in single location, import from there.