Changes to Issues a short-lived, HMAC-signed ticket that authorizes one WebSocket connection to a shared note's live document. Browsers cannot attach a bearer header to a WebSocket upgrade, so the ticket carries the resolved capability instead and the socket route verifies it without touching Supabase.