feat: per-session location tracking + admin player intelligence

Fix stale player ID causing leaderboard/coins/achievements to fail

fix: auto-heal old string guest IDs to valid UUIDs and connect trophy room to real DB table

feat: add Supabase client guard and player sync