refactor(web): rewire attach.ts to same-origin broker endpoint (NAP-241)

Browser now opens ws://{host}/api/attach/:id directly — maestro-web
reverse-proxies it to the home daemon's broker, which short-circuits to
the local PTY (NAP-243) or, once NAP-247 lands, brokers to a peer over T2.

Drops the old getConnectInfo + daemon_url path: the browser no longer
knows or cares which daemon owns a session. ConnectInfo type and the
helper are gone.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

web/src/api.ts

@@ -1,11 +1,4 @@
-import type {
-  ApiError,
-  ConnectInfo,
-  CreateSessionRequest,
-  DaemonInfo,
-  Session,
-  Uuid,
-} from "./types.js";
+import type { ApiError, CreateSessionRequest, DaemonInfo, Session, Uuid } from "./types.js";
 
 async function jsonOrError<T>(res: Response): Promise<T> {
   if (res.ok) {
@@ -50,14 +43,6 @@ export async function killSession(id: Uuid): Promise<void> {
   );
 }
 
-export async function getConnectInfo(id: Uuid): Promise<ConnectInfo> {
-  return jsonOrError(
-    await fetch(`/api/sessions/${encodeURIComponent(id)}/connect-info`, {
-      credentials: "same-origin",
-    }),
-  );
-}
-
 export function eventsWsUrl(): string {
   const proto = location.protocol === "https:" ? "wss:" : "ws:";
   return `${proto}//${location.host}/api/events`;