feat: federation batch 1+2 — bug fixes and password enforcement

Batch 1 — Bug fixes:
- Fix stale voice state on remote reconnect (clearVoiceUsersForOrigin)
- Fix logout not cleaning remote servers from store
- Fix reply-to asset normalization for remote messages
- Fix HTTPS hardcoded in autoConnectAll (store full origin, legacy fallback)

Batch 2 — Password enforcement + replication flow:
- Add connectToRemote() with home password verification before remote auth
- Auto-cascade: verify home password → register on remote → login fallback
- Replace Register/Login tabs with single password field in ConnectedInstances
- Add DifferentPasswordError for typed fallback-login UI transition
- Fallback login form shown only when remote has different password

packages/web/src/utils/assetUrls.ts

@@ -23,9 +23,9 @@ export function normalizeUserAssets<T extends { avatar?: string | null }>(user:
 
 /**
  * Rewrite user.avatar and attachment filenames on a message for remote origins.
- * Mutates in-place.
+ * Also normalizes nested replyTo message assets. Mutates in-place.
  */
-export function normalizeMessageAssets<T extends { user: { avatar?: string | null }; attachments?: { filename: string }[] }>(
+export function normalizeMessageAssets<T extends { user: { avatar?: string | null }; attachments?: { filename: string }[]; replyTo?: { user: { avatar?: string | null }; attachments?: { filename: string }[] } | null }>(
   message: T,
   origin: string,
 ): T {
@@ -36,5 +36,14 @@ export function normalizeMessageAssets<T extends { user: { avatar?: string | nul
       att.filename = resolveAssetUrl(att.filename, origin) ?? att.filename;
     }
   }
+  // Normalize reply-to message assets (remote replies have relative URLs)
+  if (message.replyTo) {
+    normalizeUserAssets(message.replyTo.user, origin);
+    if (message.replyTo.attachments) {
+      for (const att of message.replyTo.attachments) {
+        att.filename = resolveAssetUrl(att.filename, origin) ?? att.filename;
+      }
+    }
+  }
   return message;
 }