Add owner-aware session start controls to web lobby

[jackandcarter]

Summary

• expose a session start endpoint that only the lobby owner can invoke and broadcast the start to the lobby feed
• carry the owner player identifier through sessions and serialization so the UI can render it
• add start controls and prefilled session/player IDs to the static lobby page for a complete flow

Testing

• npm run lint

---

Codex Task