fix(auth): make audience vote, live-scores and ceremony routes public

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/unit/auth-public-paths.test.ts

@@ -22,4 +22,24 @@ describe('middleware public paths', () => {
   it('blocks a protected page without a session', () => {
     expect(authorized('/admin/logistics', null)).toBe(false)
   })
+
+  // Grand finale: audience QR voting, public scoreboard, and the big-screen
+  // ceremony view are all reached by attendees with NO account.
+  it('allows audience voting pages without a session', () => {
+    expect(authorized('/vote/competition/round123', null)).toBe(true)
+    expect(authorized('/vote/session456', null)).toBe(true)
+  })
+
+  it('allows the public live scoreboard without a session', () => {
+    expect(authorized('/live-scores/session456', null)).toBe(true)
+  })
+
+  it('allows the big-screen ceremony view without a session', () => {
+    expect(authorized('/live/ceremony/round123', null)).toBe(true)
+  })
+
+  it('keeps jury and admin live surfaces private', () => {
+    expect(authorized('/jury/competitions/round123/live', null)).toBe(false)
+    expect(authorized('/admin', null)).toBe(false)
+  })
 })