fix: resolve telegram auth token expiration and clean up codebase

- Fix stale initData comparison in clearStaleSessionIfNeeded that destroyed
  valid refresh tokens on mobile WebView reopens
- Restrict X-Telegram-Init-Data header to auth endpoints only
- Close Mini App on auth retry to force fresh initData from Telegram
- Merge Connection page error/not-configured states for better UX
- Remove unnecessary comments across 40+ files (section dividers,
  restating comments, noise catch block comments)
- Configure ESLint allowEmptyCatch to properly handle intentional
  empty catch blocks (62 warnings resolved)

src/utils/referral.ts

@@ -28,9 +28,7 @@ function clearCode(): void {
   try {
     localStorage.removeItem(REFERRAL_KEY);
     localStorage.removeItem(REFERRAL_TTL_KEY);
-  } catch {
-    // localStorage unavailable
-  }
+  } catch {}
 }
 
 /**
@@ -52,9 +50,7 @@ export function captureReferralFromUrl(): void {
     const newUrl =
       window.location.pathname + (newSearch ? `?${newSearch}` : '') + window.location.hash;
     window.history.replaceState(null, '', newUrl);
-  } catch {
-    // localStorage or history API unavailable
-  }
+  } catch {}
 }
 
 /**