Hosted rooms phase 2: boots, invitations, favorites, ratings, live occupancy

The client's own room actions work in hosted rooms, through the hub (t5de-hub's docs/hosted-rooms.md,
Phase 2): a "*boot" line goes to the room, then to the hub as room.boot; refused joins are declined as
the client's own are (booted ones as booted). Invitations: chat.attemptInvite polls the hub's answer,
and the invitee's client gets chatInvite on its user queue, accepting with the invite. Favorites
(favorite_rooms.php, add/removeFavoriteRoom, the favorites list), ratings (room_rating.php), the room
card's moderators, image and score, and room_occupancy queues fed from room.watch.

Web API parameters are read from JSON bodies too (imvu.http.securePost), and hosted rows added to an
empty IMVU list keep their flags numeric ("0" counted as set).

Co-Authored-By: Claude Opus 5.5 <[email protected]>

cmd/t5de-proxy/main.go

@@ -157,6 +157,7 @@ func run(logger *log.Logger, listen, ready string, parentPID int, trace bool, pa
 		prods.Hosted = rooms
 		rooms.User, rooms.LocalProduct, rooms.GlobalProduct = prods.User, prods.LocalID, prods.ProductID
 		prods.HostedOwner = rooms.Owner
+		rooms.UserDeliver = prods.DeliverToUser
 		rooms.Deliver = func(c *proxy.IMQConn, m imq.Delivered) {
 			m.Message = prods.Incoming(c, m)
 			c.Deliver(m)