feat(production): Configure WebSocket auth and multi-tenant cookies for production

- Add TokenAuthMiddleware to WebSocket connections for authenticated access
- Configure SESSION_COOKIE_DOMAIN and CSRF_COOKIE_DOMAIN for subdomain sharing (.smoothschedule.com)
- Remove '/api' prefix from URL routes to align frontend/backend conventions
- Fix imports in asgi.py (tickets instead of smoothschedule.tickets)
- Update dependencies (pyproject.toml, uv.lock)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

frontend/playwright.config.ts

@@ -22,7 +22,7 @@ export default defineConfig({
   /* Shared settings for all the projects below */
   use: {
     /* Base URL for all tests */
-    baseURL: 'http://lvh.me:5174',
+    baseURL: 'http://lvh.me:5173',
 
     /* Collect trace when retrying the failed test */
     trace: 'on-first-retry',
@@ -52,7 +52,7 @@ export default defineConfig({
   /* Run your local dev server before starting the tests */
   webServer: {
     command: 'npm run dev',
-    url: 'http://lvh.me:5174',
+    url: 'http://lvh.me:5173',
     reuseExistingServer: !process.env.CI,
   },
 });