feat: point the fleet at wss LiveKit room uwh-telhai

Publish and subscribe over wss://livekit.uni-wh.de:7800 and refuse
cleartext ws://. Conference room is uwh-telhai. Includes the uncommitted
encoded H.264 publish path, Rally hairpin, and KMS wall overlay.

tokens.py

@@ -4,7 +4,8 @@ from livekit.api import AccessToken, VideoGrants
 
 
 def make_token(url: str, api_key: str, api_secret: str,
-               room: str, identity: str) -> str:
+               room: str, identity: str,
+               attributes: dict[str, str] | None = None) -> str:
     token = (
         AccessToken(api_key, api_secret)
         .with_identity(identity)
@@ -13,10 +14,12 @@ def make_token(url: str, api_key: str, api_secret: str,
             room_join=True,
             room=room,
             can_publish=True,
-            can_subscribe=True,
+            can_subscribe=False,
             can_publish_data=True,
         ))
     )
+    if attributes:
+        token = token.with_attributes(attributes)
     return token.to_jwt()