Keep API not-found and 401 responses usable behind Ingress and in the Web UI.

Return native JSON with the missing id in the message, clear stale sessions on
401, and document ingress-nginx annotations so branded HTML 404/405 pages do
not rewrite simulator bodies.

helm/vmware-api-simulator/values-ingress-example.yaml

@@ -32,6 +32,13 @@ seed:
 ingress:
   enabled: true
   className: nginx
+  # Keep API JSON bodies (404/405/401). Cluster-wide custom-http-errors HTML
+  # pages must not rewrite simulator error responses.
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
+    # If the controller still injects branded HTML for 404/405, narrow or clear
+    # custom-http-errors on this Ingress (overrides controller defaults):
+    nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
   hosts:
     - host: vmware-sim.example.com
       paths: