feat(config): phase 7 — drop /ims basePath, update all hardcoded paths, refresh env spec

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/(protected)/hse/dashboard/page.tsx

@@ -164,13 +164,13 @@ export default async function HseDashboardPage({
         <h1 className="text-2xl font-bold text-gray-900">Dashboard</h1>
         <div className="flex gap-3">
           <a
-            href="/ims/api/dashboard/export?role=hse"
+            href="/api/dashboard/export?role=hse"
             className="text-sm text-gray-500 hover:text-gray-700 border border-gray-200 rounded-lg px-3 py-1.5"
           >
             Export CSV
           </a>
           <a
-            href={`/ims/api/reports/jkkp8?year=${now.getFullYear()}`}
+            href={`/api/reports/jkkp8?year=${now.getFullYear()}`}
             className="text-sm text-gray-500 hover:text-gray-700 border border-gray-200 rounded-lg px-3 py-1.5"
           >
             JKKP 8
@@ -191,7 +191,7 @@ export default async function HseDashboardPage({
               <p className="text-sm text-amber-800">
                 <strong>JKKP 8 annual register due:</strong> the {now.getFullYear() - 1} register must be
                 submitted to DOSH before 31 January {now.getFullYear()}.{' '}
-                <a href={`/ims/api/reports/jkkp8?year=${now.getFullYear() - 1}`} className="underline font-medium">
+                <a href={`/api/reports/jkkp8?year=${now.getFullYear() - 1}`} className="underline font-medium">
                   Download {now.getFullYear() - 1} register
                 </a>
               </p>