An htpasswd secret is updated and the ingress still accepts the old password

The secret version changes, yet the reloader's comparison logic treats CRLF normalization as a no-op and skips the auth reload.