fix(security): harden authentication and outbound targets (#1877)

* fix(security): harden auth and outbound targets

* fix(security): prevent login lockout and honor trusted schemes

.github/actions/start-app/action.yml

@@ -77,6 +77,7 @@ runs:
         COMPOSE_DIR: ${{ inputs.compose-dir }}
         PORT: ${{ inputs.port }}
         NODE_ENV: test
+        SENCHO_E2E_ALLOW_LOOPBACK_OUTBOUND: 'true'
 
     - name: Start frontend dev server
       shell: bash