User Realtime Access

Authorize a WebSocket subscription to a user:{user_id} Y.Doc.

Used by Hocuspocus to gate the user-scoped notifications channel. Allowed iff the Stytch token resolves to the same internal user as the requested document — i.e. user A can only subscribe to user:A.