Package verified Dune checkpoints for TrueNAS and HTTPS proxying

Serve built Workers directly through pinned Miniflare with persistent D1-compatible storage and startup migrations. Build and verify Docker images in CI; publish main checkpoints to GHCR for manual TrueNAS updates on port 33046. Preserve explicit public-origin checks and LAN-compatible cryptographic operation IDs.

Validation: 5,153 offline tests, typecheck, lint and build; 49 HTTP integration cases; HTTPS-origin create/join/chat/seat protection, foreign-origin rejection, exact saved-seat restart and browser asset serving. Independent persistence/proxy review completed. Clean Docker CI and actual NAS installation follow this source checkpoint.

lib/room-entry.ts

@@ -1,3 +1,4 @@
+import { randomId } from './random-id';
 import { EXPANSIONS, FACTIONS } from '../game/catalog';
 import { requestMayHaveCompleted } from './client-request';
 
@@ -108,7 +109,7 @@ export function createRoomEntry(
   roomCode?: string,
 ): RoomEntryAttempt {
   const entry = {
-    operationId: globalThis.crypto.randomUUID(),
+    operationId: randomId(),
     sessionToken: Array.from(
       globalThis.crypto.getRandomValues(new Uint8Array(32)),
       (byte) => byte.toString(16).padStart(2, '0'),