Player authentication layer

{"ops":[{"insert":"Auth layer for players joining a session — schema-backed storage, permissions kept in both web session and socket session, admin auto-created on session creation to save a DB round-trip, plus the actual auth modal UI.\n"}]}