Replaces TestTurnstileRoutesSmoke: empty adds nothing; open, closed and a space-padded closed add turnstile:{mode} to POST login and register only, every other route keeps its middleware; invalid values fail naming the key.
