feat: add voice disconnect permission and fix federation identity

- Add DISCONNECT_MEMBERS permission (bit 27) to disconnect users from voice
- Implement voice_disconnect WebSocket handler with permission checks
- Add disconnect button to voice user context menu
- Grant instance admins full permissions across all spaces
- Fix voice_disconnected handler to use federation-aware identity resolution
- Update CLAUDE.md with new event types and permission docs

packages/web/src/hooks/useWebSocket.ts

@@ -345,6 +345,14 @@ function handleEvent(origin: string, event: ServerEvent): void {
       break;
     }
 
+    case 'voice_disconnected': {
+      const myDisconnectId = isHome ? useAuthStore.getState().user?.id : getMyUserIdForOrigin(origin);
+      if (event.userId === myDisconnectId) {
+        useVoiceStore.getState().handleForceDisconnect();
+      }
+      break;
+    }
+
     case 'member_joined':
       if (!isHome) normalizeUserAssets(event.member.user, origin);
       addMember(event.member);