perf(pcat): demote e-acca.com to the end of the JWT site round-robin

PCAT auth pool warm-up always started with e-acca.com, which doesn't
load through the new DataImpulse rotating proxy — page.goto sits on
the 30s navigation timeout and only then falls through to the next
candidate. The remaining sites (alkatalog, auto-komplekt, autotrade,
…) reach the upstream widget in 3-10s through the same proxy, so an
on-demand acquireSession() that lands during a cold start spends 30s
blocked on the dead first hop before any retry can succeed.

Move e-acca to the end of the list. New cold-pool capture finishes
in ~4s on the first reachable site (alkatalog) instead of 30s+9s.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/api/src/integrations/parts-catalogs/parts-catalogs-auth.service.ts

@@ -34,8 +34,13 @@ const RPM_PER_SLOT = 6; // 1 token per 6 req/min
  * Widget loads JS → calls /v3/api/proxy/* with x-api-key + supporting X-* headers.
  * Each site uses a different proxy port (IP) to avoid rate limiting.
  */
+// Order matters: round-robin starts from index 0, so the first site is the
+// one a cold pool waits on. e-acca.com is intentionally last because the
+// new DataImpulse rotating proxy (74.81.81.81:10000-10999) can't reach it
+// — `page.goto` blocks until the 30s navigation timeout instead of failing
+// fast like the other sites. Sites that consistently load in <10s through
+// the proxy stay at the top so initial JWT capture finishes in seconds.
 const JWT_SITES = [
-  "https://www.e-acca.com/cats/#/catalogs",
   "https://www.alkatalog.com/cats/#/catalogs",
   "https://auto-komplekt.ru/goodvin#/catalogs",
   "https://www.autotrade.md/cats/#/catalogs",
@@ -45,6 +50,7 @@ const JWT_SITES = [
   "https://www.autodo.kz/#/catalogs",
   "https://avtoman124.ru/goodvin#/catalogs",
   "https://flynestauto.com/auto-parts-oem-catalog",
+  "https://www.e-acca.com/cats/#/catalogs",
 ];
 
 // DataImpulse proxy defaults (port-based IP rotation)