fix: place /jet/tunnel routes behind enable_unstable flag

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: irvingoujAtDevolution

devolutions-gateway/src/api/mod.rs

@@ -36,7 +36,6 @@ pub fn make_router<S>(state: crate::DgwState) -> axum::Router<S> {
         .nest("/jet/webapp", webapp::make_router(state.clone()))
         .nest("/jet/net", net::make_router(state.clone()))
         .nest("/jet/traffic", traffic::make_router(state.clone()))
-        .nest("/jet/tunnel", tunnel::make_router(state.clone()))
         .nest("/jet/update", update::make_router(state.clone()));
 
     if state.conf_handle.get_conf().web_app.enabled {
@@ -47,6 +46,7 @@ pub fn make_router<S>(state: crate::DgwState) -> axum::Router<S> {
     }
 
     if state.conf_handle.get_conf().debug.enable_unstable {
+        router = router.nest("/jet/tunnel", tunnel::make_router(state.clone()));
         router = router.nest("/jet/net/monitor", monitoring::make_router(state.clone()));
 
         if state.conf_handle.get_conf().ai_gateway.enabled {