feat: add reconnect hosting, profile APIs, and map/role tooling

fix: enforce token propagation and stabilize auth routing

chore: reset repository history with clean initial import