V5 Web Skeleton

This is the browser-facing boundary for the initial v5 communication and auth bootstrap.

• Scoped entry token issuance route
• Realtime attach bootstrap route
• First command contract fixture

Next local milestone: Better Auth Tier 1 adapter, Hyperdrive-backed Drizzle access, and a basic RLS visibility check.