Viewer tokens

Short-lived, battle-scoped credentials for the live WebSocket feed.

📄️Mint a viewer token for the live feed

Issues a short-lived token scoped to **this battle only**, valid for 15 minutes.