feat: Add new API controllers for progression events, room consumables, currencies, earnings distributions, screen share reports, subscription seasons, and UGC purchasables

- Implemented ProgressionEventsController to handle progression event retrieval and active events.
- Created RoomConsumablesController for listing and purchasing room consumables.
- Developed RoomCurrenciesController for managing room currencies, including creation, updates, and balance retrieval.
- Added RoomEarningsDistributionsController to fetch earnings distribution data for rooms.
- Introduced ScreenShareReportsController for reporting screen share incidents.
- Established SubscriptionSeasonsController to provide current subscription season details and rewards.
- Launched UgcPurchasablesController for managing user-generated content purchasables, including bulk operations.
- Added new data entities for customization and room economy, including custom avatar items, room currencies, and UGC purchasables.

DorkNet.Server/Services/AuthService.cs

@@ -9,6 +9,8 @@ namespace DorkNet.Server.Services;
 
 public class AuthService(IConfiguration config, DorkNetDbContext db)
 {
+    public const string AccessCookieName = "dorknet_access_token";
+
     // Resolution order MUST match Program.cs's JwtBearer validator setup —
     // env var first, config key second — otherwise tokens are signed with
     // one secret and validated against another and every authenticated
@@ -56,13 +58,22 @@ public class AuthService(IConfiguration config, DorkNetDbContext db)
         var claims = new List<Claim>
         {
             new(ClaimTypes.NameIdentifier, playerId.ToString()),
+            new(JwtRegisteredClaimNames.Sub, playerId.ToString()),
+            new("accountId", playerId.ToString()),
+            new("account_id", playerId.ToString()),
+            new("accountid", playerId.ToString()),
             new(ClaimTypes.Role, "gameClient"),
+            new("roles", "gameClient"),
             new("token_type", tokenType),
         };
         // Multiple Role claims become a JSON array on the wire — the
         // watch's HasRole helper handles both string and List<string>
         // forms.
-        if (isDev) claims.Add(new Claim(ClaimTypes.Role, "developer"));
+        if (isDev)
+        {
+            claims.Add(new Claim(ClaimTypes.Role, "developer"));
+            claims.Add(new Claim("roles", "developer"));
+        }
 
         var descriptor = new SecurityTokenDescriptor
         {