feat(production): Configure WebSocket auth and multi-tenant cookies for production

- Add TokenAuthMiddleware to WebSocket connections for authenticated access
- Configure SESSION_COOKIE_DOMAIN and CSRF_COOKIE_DOMAIN for subdomain sharing (.smoothschedule.com)
- Remove '/api' prefix from URL routes to align frontend/backend conventions
- Fix imports in asgi.py (tickets instead of smoothschedule.tickets)
- Update dependencies (pyproject.toml, uv.lock)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

smoothschedule/pyproject.toml

@@ -170,6 +170,7 @@ dependencies = [
     "celery==5.5.3",
     "channels==4.0.0",
     "channels-redis==4.1.0",
+    "daphne==4.1.2",
     "crispy-bootstrap5==2025.6",
     "django==5.2.8",
     "django-allauth[mfa]==65.13.1",