fix: align local server authentication with launcher

scripts/start-isolated-dev-server.sh

@@ -1,8 +1,8 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-# Local-only multiplayer test runtime. Insecure authentication is deliberately
-# restricted to loopback so two local clients can exercise shared state.
+# Local-only multiplayer test runtime. It uses Hytale's normal authenticated
+# mode so the launcher client can join; bind remains loopback-only.
 project_root="$(CDPATH= cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd -P)"
 runtime_root="${PROJECT_CAPTURE_DEV_SERVER:-$(CDPATH= cd -- "${project_root}/.." && pwd -P)/ProjectCapture-devserver}"
 server_directory="${runtime_root}/Server"
@@ -18,6 +18,6 @@ exec java -Xmx4G -jar HytaleServer.jar \
   --assets "${runtime_root}/Assets.zip" \
   --mods "${runtime_root}/mods" \
   --universe "${runtime_root}/universe" \
-  --auth-mode insecure \
+  --auth-mode authenticated \
   --bind 127.0.0.1:5521 \
   --disable-sentry