fix: 공개 API와 토너먼트의 사용자·장수 권한 경계를 강화한다

app/game-api/src/trpc.ts

@@ -24,7 +24,7 @@ import { recordGeneralActivity } from './services/generalActivity.js';
 const t = initTRPC.context<GameApiContext>().create({ errorFormatter: safeTrpcErrorFormatter });
 
 const requireAuthMiddleware = t.middleware(({ ctx, next }) => {
-    if (!ctx.auth) {
+    if (!ctx.auth || ctx.auth.profile !== ctx.profile.name) {
         throw new TRPCError({
             code: 'UNAUTHORIZED',
             message: 'Unauthorized',