fix: resolve telegram auth token expiration and clean up codebase

- Fix stale initData comparison in clearStaleSessionIfNeeded that destroyed
  valid refresh tokens on mobile WebView reopens
- Restrict X-Telegram-Init-Data header to auth endpoints only
- Close Mini App on auth retry to force fresh initData from Telegram
- Merge Connection page error/not-configured states for better UX
- Remove unnecessary comments across 40+ files (section dividers,
  restating comments, noise catch block comments)
- Configure ESLint allowEmptyCatch to properly handle intentional
  empty catch blocks (62 warnings resolved)

src/api/rbac.ts

@@ -1,7 +1,5 @@
 import apiClient from './client';
 
-// === Types ===
-
 export interface AdminRole {
   id: number;
   name: string;
@@ -144,8 +142,6 @@ export interface PermissionSection {
   actions: string[];
 }
 
-// === API ===
-
 const BASE = '/cabinet/admin/rbac';
 
 export const rbacApi = {