server: elect the claim skip, and have clients advertise it

[erikhortsch]

Summary

WithClientSkipClaim (#120) only reaches clients constructed through
rpc.ClientParams.Options()/Args(). Constructors that hand-pick options off
the params struct drop it silently — and some of them live in other repos, so
the caller-side switch cannot cover the fleet. In staging, DirectorRoomStore
and RoomManager are still granting claims for exactly this reason;
RoomManager's client is built in livekit-server, which cloud does not
override.

The round trip being skipped is server→client→server, and it delays the handler
starting, so the server is where the decision belongs. This moves it there:

• WithServerSkipClaim — a server elects to announce rather than negotiate,
  for every queue rpc it handles. Takes func() bool to keep the runtime
  revocability the client option had.
• WithClientSkipClaim is removed. The request bit becomes an
  advertisement: always set on a queue rpc, because a caller built from this
  version can always accept an announcement.

handling becomes ir.SkipClaim && serverSkip && h.i.Queue — both ends must
agree. The queue re-check is unchanged, so a broadcast rpc still negotiates, and
the outcome is still reported as ClaimSkipped.

Why one switch instead of two

Two switches for one decision let a caller force an announcement at a server that
never opted in, and put the version-skew risk on the wrong end. With the server
electing and the client merely advertising, an announcement can only ever reach a
caller that asked for one — a caller predating the field leaves it false and is
always negotiated with.

That closes the concern this PR originally shipped with. The earlier revision had
a new server announcing Handling: true to clients on v0.7.2/v0.7.3 that have
never heard of the field; I argued that degraded benignly, but "benign" was code
reading rather than a mixed-version run. It is now structurally impossible
instead, and covered by a test.

Verification

• go build ./... — clean
• go test -race ./... — passes, except a pre-existing failure in
  TestRPC/Local/RPC: counter++ in the test's own addOne handler
  (internal/test/psrpc_test.go:81) is unsynchronized. Confirmed identical on
  origin/main at c7c1207 with these changes stashed. Not addressed here.
• TestSkipClaim exercises Local, NATS and Redis, and asserts the queue rpc
  skips, the handler runs exactly once, and a broadcast rpc still claims.
• TestSkipClaimCallerDoesNotAdvertise strips the field on the wire to stand in
  for an older caller, and asserts it is still granted against a server that has
  elected to skip. I mutation-checked this one — dropping ir.SkipClaim && from
  the gate fails it.
• TestSkipClaimDisabledByDefault and TestSkipClaimRevokedAtRuntime now cover
  the server end: unset means claim, and revoking takes effect on the next
  request.

Note

The proto field keeps the name skip_claim though it now means "can accept a
skip" rather than "please skip". Renaming it would churn internal.pb.go for a
naming nicety; the comment carries the meaning. Say the word if you would rather
have the rename.

Related

Follow-ups that depend on a tag cut from this: livekit/protocol#1729 (wire into
WithDefaultServerOptions) and livekit/cloud#4586 (config + client-constructor
cleanup).

🤖 Generated with Claude Code