fix: role preview loading and delete

fix: enforce token propagation and stabilize auth routing

fix: relax monopoly-server auth allowlist for public room/map APIs

chore: reset repository history with clean initial import