fix: add @AllowAnonymous to root endpoint alongside @Public and @SkipArcjet

[kenneth-loto]

Summary

Adds @AllowAnonymous() to the root GET / handler so Better Auth's global guard stops blocking the endpoint.

What's Changed

• Added @AllowAnonymous import from @thallesp/nestjs-better-auth
• Applied @AllowAnonymous() to getRoot() alongside the existing @Public()
  and @SkipArcjet()

Why

Two independent global guards run on every request. Our AuthGuard reads @Public() and Better Auth's guard reads @AllowAnonymous() — neither recognises the other's decorator. The root endpoint needs all three skip decorators to pass both guards and Arcjet.

[github-actions]

Base branch auto-updated: This PR has been redirected from main to develop. Please ensure feature, fix, or chore branches are integrated into develop before production releases.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None