fix: improve WebSocket error responses and protocol compliance

- Send OK false for rate limit errors instead of NOTICE
- Send OK false for auth errors (e.g. pubkey not in allowlist)
- Remove OK response for AUTH events (AUTH is not an EVENT type)
- Parse event before auth checks to get event ID for error responses

These changes improve client UX by providing immediate, structured
feedback for all rejection cases instead of generic NOTICE messages.

The AUTH event OK removal fixes a bug where clients would read the
wrong response when sending EVENT after AUTH.

0 files changed, 0 insertions, 0 deletions