v1.0.0

fix case-sensitive subdomain matching, remove auto-generated auth tokens

extractSubdomain: lowercase both host and domain before comparison so
browser Host headers (always lowercase) match tunnel registration.

generateSubdomain: lowercase prefix from "Skink-" to "skink-".

Auto-generated tokens removed: --token "" means no auth required.
Trim whitespace from reg.Token on the server side.