[SandObserver]

Summary

• Default a Proxmox Backup Server address with no scheme to https:// in pbsConn. dupNormalizeBase added http://, so the PBSAPIToken header crossed the network in clear text before the request failed.
• Strip a login from an imported link by parsing it with URL and clearing username and password, in place of a pattern that required exactly //. http:/, http:///, http:\\ and http: links kept their credentials in the saved link and the health check address.
• Match any run of slashes or backslashes after a web scheme when removing logins from preview text, and keep mailto: addresses intact.

Testing
All green. Added tests for the bare PBS address, the four slash forms and a mail link.

Changelog

Checklist

• Stays within the project constraints: one container, no runtime dependencies, no build step (see CONTRIBUTING.md).
• Tests added or updated for new logic, and the full suite, lint, and typechecks pass.
• Docs updated if behavior or configuration changed.