fix: sidebar auth race — pass token in getPort response

The sidebar called tryConnect() → getPort → got {port, connected} but
NO token. All subsequent requests (SSE, chat poll) failed with 401.
The token only arrived later via the health broadcast, but by then
the SSE connection was already broken.

Fix: include authToken in the getPort response so the sidebar has
the token from its very first connection attempt.

extension/background.js

@@ -270,7 +270,7 @@ chrome.runtime.onMessage.addListener((msg, sender, sendResponse) => {
   }
 
   if (msg.type === 'getPort') {
-    sendResponse({ port: serverPort, connected: isConnected });
+    sendResponse({ port: serverPort, connected: isConnected, token: authToken });
     return true;
   }
 

extension/sidepanel.js

@@ -1396,8 +1396,7 @@ function tryConnect() {
   chrome.runtime.sendMessage({ type: 'getPort' }, (resp) => {
     if (resp && resp.port && resp.connected) {
       const url = `http://127.0.0.1:${resp.port}`;
-      // Token arrives via health broadcast from background.js
-      updateConnection(url, null);
+      updateConnection(url, resp.token || null);
     } else {
       setTimeout(tryConnect, 2000);
     }