fix: use server-side URL rewrite instead of 302 redirect for token injection

302 redirect was unreliable in incognito mode — the browser followed
the redirect but OpenClaw's frontend sometimes failed to pick up the
token. Server-side rewrite injects the token directly into req.url
before OpenClaw processes it, eliminating the redirect round-trip.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

scripts/token-redirect.cjs

@@ -215,12 +215,11 @@ http.Server.prototype.emit = function (event, ...args) {
         return origEmit.apply(this, [event, ...args]);
       }
     } else {
-      // Default mode: redirect GET / to /?token=xxx
+      // Default mode: rewrite URL to inject token (no redirect needed)
       if (req.method === 'GET' && !req.headers.upgrade) {
         if (pathname === '/' && !parsed.query.token) {
-          res.writeHead(302, { Location: `/?token=${GATEWAY_TOKEN}` });
-          res.end();
-          return true;
+          req.url = `/?token=${GATEWAY_TOKEN}`;
+          return origEmit.apply(this, [event, ...args]);
         }
       }
     }