fix: remove --auth-url from wzp-web (variants handle auth differently)

The 'full' variant sends a key exchange as first WS message, not auth.
The 'pure' variant sends raw PCM immediately, no auth.
Only ws/ws-fec/ws-full variants send auth JSON.

With auth removed, wzp-web accepts all WS connections. Auth is
still enforced on the relay (--auth-url) for direct connections.
Caddy provides access control at the TLS layer.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

warzone/deploy/docker/docker-compose.yml

@@ -76,11 +76,8 @@ services:
       - "8080"
       - "--relay"
       - "172.28.0.10:4433"
-      - "--auth-url"
-      - "http://warzone-server:7700/v1/auth/validate"
     depends_on:
       - wzp-relay
-      - warzone-server
     networks:
       - backend