Describe the bug

Currently the .htaccess.dist seems to disallow access to important scripts as well.

To Reproduce

1. Deploy freshrss without the ability to change DocumentRoot.
2. Make sure .htaccess is allowed to override changes
3. Rename .htaccess.dist to .htaccess in root of www
4. See that web form login is not useable due to no access to bcrypt.js in p/scripts/vendor.

Expected behavior

I would have expected the .httaccess rules to be right out of the box.

FreshRSS version

1.26.2

System information

• Database version: PostgreSQL 14
• PHP version: 8.1
• Installation type: Git
• Web server type: Apache 2.4

Additional context

No response