You were right - my attempt to put subversion at / is the root of my problem. I was rewriting GET requests to go to viewvc, but looking at access logs, subversion is doing a GET as part of this command.
I'm not sure why so much other stuff worked, leading me to mistakenly think subversion was never using GET and it was safe to rewrite it for viewvc. Now to go reconfigure everything ... Dan