- Remove VITE_TLSYNC_SECRET from syncService.ts; token is now
fetched at runtime via fetchTlsyncToken() from the API backend
- Add token?: string to SyncConnectionOptions interface
- Update multiplayerUser.tsx to fetch TLSync token from API on mount
and pass it through createSyncConnectionOptions
- Remove VITE_TLSYNC_SECRET from .env.example
The API must implement GET /tlsync/token (authenticated via Supabase
Bearer token) to complete the fix.
