Add roll-off flow (SSSO 2.1) replacing check-in for friendlies
- MatchState.roll + 'rolling' phase default for pending matches
- engine roll()/chooseFirstBan() with tie re-roll and winner-gated ban order
- serializePlayerView gains roll + server-computed turn (roll/roll-tie/choose-ban)
- new routes: /matches/:id/player/roll, /choose-first-ban + share equivalents
- HttpError status codes for wrong-phase/forbidden roll actions
- tests: check-in->rolling assertions, friendly roll-off coverage