fix: three test failures after Http4s600 lazy-val restore

1. Http4s600: add missing POST /management/webui_props (createWebUiProps)
   OBPAPI6_0_0.routes is Nil — all v6 endpoints must be in Http4s600.
   The POST endpoint existed in Http4s310 but was never ported to v6.

2. Http4s600: enable v600→v510 bridge for inherited endpoints
   OBPAPI6_0_0.routes=Nil means there is no Lift fallback for v6 paths
   not implemented in Http4s600. Endpoints inherited from lower versions
   (e.g. GET /my/accounts from v3.0.0) must reach their implementation
   via the bridge cascade. Enable the pre-existing v600ToV510Bridge.

3. RateLimitingUtil: only increment counters for active limits (limit > 0)
   incrementConsumerCounters was incrementing all period counters on every
   call regardless of whether a limit was set. When a later test scenario
   set per_hour=1, the hour counter already had accumulated calls from
   earlier scenarios (per_second, per_minute), causing immediate 429 on
   the first call. Skip increment when limit <= 0.

Author: hongwei1

obp-api/src/main/scala/code/api/util/RateLimitingUtil.scala

@@ -265,7 +265,7 @@ object RateLimitingUtil extends MdcLoggable {
   }
 
   private def incrementConsumerCounters(consumerKey: String, period: LimitCallPeriod, limit: Long): (Long, Long) = {
-    if (useConsumerLimits) {
+    if (useConsumerLimits && limit > 0) {
       incrementCounter(createUniqueKey(consumerKey, period), period)
     } else {
       (-1, -1)

obp-api/src/main/scala/code/api/v6_0_0/Http4s600.scala

@@ -1790,6 +1790,7 @@ object Http4s600 {
           .orElse(getConnectorTraces(req))
           .orElse(getDynamicEntityDiagnostics(req))
           .orElse(cleanupOrphanedDynamicEntityRecords(req))
+          .orElse(createWebUiProps(req))
           .orElse(createOrUpdateWebUiProps(req))
           .orElse(deleteWebUiProps(req))
           .orElse(createCustomViewManagement(req))
@@ -2249,6 +2250,36 @@ object Http4s600 {
       Some(canCleanupOrphanedDynamicEntityRecords :: Nil),
       http4sPartialFunction = Some(cleanupOrphanedDynamicEntityRecords))
 
+    // POST /obp/v6.0.0/management/webui_props
+    lazy val createWebUiProps: HttpRoutes[IO] = HttpRoutes.of[IO] {
+      case req @ POST -> `prefixPath` / "management" / "webui_props" =>
+        EndpointHelpers.withUserAndBodyCreated[WebUiPropsCommons, Any](req) { (user, postedData, cc) =>
+          for {
+            _ <- NewStyle.function.hasEntitlement("", user.userId, canCreateWebUiProps, Some(cc))
+            _ <- NewStyle.function.tryons(
+              s"""$InvalidWebUiProps name must be start with webui_, but current post name is: ${postedData.name} """,
+              400, Some(cc)) { require(postedData.name.startsWith("webui_")) }
+            webUiProps <- Future(MappedWebUiPropsProvider.createOrUpdate(postedData)) map {
+              unboxFullOrFail(_, Some(cc))
+            }
+          } yield (webUiProps: WebUiPropsCommons)
+        }
+    }
+
+    resourceDocs += ResourceDoc(
+      null, implementedInApiVersion, nameOf(createWebUiProps), "POST",
+      "/management/webui_props",
+      "Create WebUiProps",
+      s"""Create a WebUiProps.
+         |
+         |${APIUtil.userAuthenticationMessage(true)}
+         |""",
+      WebUiPropsCommons("webui_api_explorer_url", "https://apiexplorer.openbankproject.com"),
+      WebUiPropsCommons("webui_api_explorer_url", "https://apiexplorer.openbankproject.com", Some("web-ui-props-id")),
+      List($AuthenticatedUserIsRequired, UserHasMissingRoles, InvalidJsonFormat, UnknownError),
+      List(apiTagWebUiProps), Some(List(canCreateWebUiProps)),
+      http4sPartialFunction = Some(createWebUiProps))
+
     // PUT /obp/v6.0.0/management/webui_props/WEBUI_PROP_NAME
     lazy val createOrUpdateWebUiProps: HttpRoutes[IO] = HttpRoutes.of[IO] {
       case req @ PUT -> `prefixPath` / "management" / "webui_props" / webUiPropName =>
@@ -8501,5 +8532,8 @@ object Http4s600 {
   // A `lazy val` defers the read until first access (from Http4sApp after Boot
   // completes), by which time Impl6 is fully initialised.
   lazy val wrappedRoutesV600Services: HttpRoutes[IO] =
-    Implementations6_0_0.allRoutesWithMiddleware
+    Kleisli[HttpF, Request[IO], Response[IO]] { req =>
+      Implementations6_0_0.allRoutesWithMiddleware.run(req)
+        .orElse(Implementations6_0_0.v600ToV510Bridge.run(req))
+    }
 }