Function unverified_websocket_room 

pub(super) fn unverified_websocket_room(
    token: &SecretString,
) -> Result<String, AuthenticationError>

Extracts a candidate room ID without authenticating the token.

Returns AuthenticationError for malformed claims or a missing room ID. The caller must verify the same token with the selected room’s key.