v2.7.0

TinyIce 2.7.0

Added
  - tinyice --version / tinyice version
  - monitor player in the AutoDJ Studio

Fixed
  - #46 browser Go Live always returned Unauthorized: the page sent no
    credentials, and the rejection was console-only. An authenticated
    admin session (CSRF-protected, mount-scoped) is now accepted
    alongside the source password.
  - #47 trusted_proxies was wired into one code path only, so audit
    logs, auth logs, bans, rate limiting, viewer tracking and listener
    geo all recorded the reverse proxy. Exact proxy entries also failed
    to match IPv4-mapped IPv6 peers.
  - #49 the AutoDJ page refetched once per stream per SSE tick and
    flashed its loading state each time; pausing an AutoDJ ended its
    playback goroutine, so play never resumed.
  - #51 the Studio's live-update handler parsed a payload shape the
    server has never sent and threw silently, leaving the transport
    button stuck on Play. Playlist rows, the file browser and three
    Studio endpoints were broken by the same class of mismatch.

Changed
  - AutoDJ playlist and queue items are snake_case on the wire:
    {"Title","Path","ID"} became {"title","path","id"}. Affects
    /api/autodj/{mount}/playlist, /api/autodj/{mount}/queue and the
    queue/playlist arrays in the autodj SSE event. Scripts reading the
    capitalised keys need updating.
  - autodj payloads gained position and current_id; playlist_pos is now
    populated.