feat(api): version authenticated room mutations

[Poooel]

Summary

• move room initialization, rematches, display-name updates, and WebSocket ticket issuance to authenticated v1 endpoints
• validate settings and display names from strict JSON bodies while deriving actors from credentials
• prevent spectators from voting for rematches or changing player display names
• migrate the frontend and regression coverage away from identity-bearing room command URLs

[cloudflare-workers-and-pages]

Deploying knucklebones with    Cloudflare Pages

Latest commit:	1f2175e
Status:	✅  Deploy successful!
Preview URL:	https://908af601.knucklebones-8ep.pages.dev
Branch Preview URL:	https://versioned-room-api.knucklebones-8ep.pages.dev

View logs