Final architecture verification.
- Confirm the WS auth contract is consistent across backend and client
- Confirm authManager is wired correctly into AgentServer
- Confirm no hidden dependency on HTTP-only request context exists in WS auth