feat(gateway): detect port-based Tailscale Serve proxies (#330)

fix: prefer explicit public gateway websocket url (#325)

feat(refactor): ready for manual QA after main sync (#274)

fix(gateway): use stored token for websocket connect payload