62e0d6fbed
EventSource API doesn't support custom headers, so pass token as ?token= query parameter. Server auth middleware now accepts token from both Authorization header and query param. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>