fix: resolve telegram auth token expiration and clean up codebase

- Fix stale initData comparison in clearStaleSessionIfNeeded that destroyed
  valid refresh tokens on mobile WebView reopens
- Restrict X-Telegram-Init-Data header to auth endpoints only
- Close Mini App on auth retry to force fresh initData from Telegram
- Merge Connection page error/not-configured states for better UX
- Remove unnecessary comments across 40+ files (section dividers,
  restating comments, noise catch block comments)
- Configure ESLint allowEmptyCatch to properly handle intentional
  empty catch blocks (62 warnings resolved)

src/utils/topUpStorage.ts

@@ -16,9 +16,7 @@ function isRecord(value: unknown): value is Record<string, unknown> {
 export function saveTopUpPendingInfo(info: TopUpPendingInfo) {
   try {
     sessionStorage.setItem(STORAGE_KEY, JSON.stringify(info));
-  } catch {
-    // sessionStorage unavailable (private mode, quota, etc.)
-  }
+  } catch {}
 }
 
 export function loadTopUpPendingInfo(): TopUpPendingInfo | null {
@@ -57,7 +55,5 @@ export function loadTopUpPendingInfo(): TopUpPendingInfo | null {
 export function clearTopUpPendingInfo() {
   try {
     sessionStorage.removeItem(STORAGE_KEY);
-  } catch {
-    // ignore
-  }
+  } catch {}
 }