perf(html): replace proxyAuth with getToken to remove set-cookie; add Cache-Control per auth state

src/lib/proxy-access.ts

@@ -1,4 +1,5 @@
 export interface ProxyToken {
+	sub?: string;
 	rank?: unknown;
 }