Improve JWT claims and chat channel reliability

Adds standard JWT claims (audience and issuer) to access tokens and updates config for these fields. Refactors multiplayer room chat channel logic to ensure reliable user join/leave with retry mechanisms, improves error handling and cleanup, and ensures host is correctly added as a participant. Updates Docker entrypoint for better compatibility and connection handling, modifies Docker Compose and Nginx config for improved deployment and proxy header forwarding.

docker-compose-osurx.yml

@@ -76,8 +76,8 @@ services:
     command: redis-server --appendonly yes
 
   spectator:
-    image: ghcr.io/googuteam/osu-server-spectator:latest
-    container_name: osu-server-spectator
+    image:  ghcr.io/googuteam/osu-server-spectator:latest
+    pull_policy: never
     environment:
       - SAVE_REPLAYS=${SAVE_REPLAYS:-}
       - REPLAY_UPLOAD_THREADS=${REPLAY_UPLOAD_THREADS:-1}
@@ -98,10 +98,7 @@ services:
       - SHARED_INTEROP_DOMAIN=http://app:8000
       - SHARED_INTEROP_SECRET=${SHARED_INTEROP_SECRET:-}
       - JWT_SECRET_KEY=${JWT_SECRET_KEY}
-      - JWT_ALGORITHM=${JWT_ALGORITHM:-HS256}
-      - JWT_ACCESS_TOKEN_EXPIRE_MINUTES=${JWT_ACCESS_TOKEN_EXPIRE_MINUTES:-1440}
-      - OSU_CLIENT_ID=${OSU_CLIENT_ID:-5}
-      - USE_LEGACY_RSA_AUTH=${USE_LEGACY_RSA_AUTH:-}
+      - USE_LEGACY_RSA_AUTH=0
     env_file:
       - .env
     volumes:
@@ -115,7 +112,7 @@ services:
       - osu-network
 
   nginx:
-    image: nginx:1.25-alpine
+    image: docker.1ms.run/nginx:1.25-alpine
     ports:
       - "8000:80"
     volumes: