Accept Call

The callee answering an incoming ring — mints THEIR join token against the call's already-created LiveKit room (the caller's own token was minted synchronously in start_call above). Only the two parties on the call can do this; anyone else gets the same 404 a made-up/already-ended call_id would, so a call's existence is never leaked to a third party by response-code alone.