auth: store-review test login + matchmaking no-hang/watchdog

- OtpService: a designated test phone (default 09120000000 / code 453115,
  overridable via Sms__TestPhone/Sms__TestCode) skips real SMS and always
  verifies — for Google Play / Bazaar / Myket reviewers. Give them these creds.
- Matchmaking UX: tapping a league now navigates to the matchmaking screen
  BEFORE awaiting the SignalR handshake, so the button can't freeze. Added a
  watchdog hint after 28s ("connection took too long, cancel & retry") so it
  never spins forever when the hub doesn't connect.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/components/screens/OnlineLobbyScreen.tsx

@@ -48,8 +48,10 @@ export function OnlineLobbyScreen() {
       go("buycoins");
       return;
     }
-    await startMatchmaking({ ranked: true, stake: l.entry });
+    // Navigate FIRST so the button never hangs on the SignalR handshake; the
+    // matchmaking screen shows "searching" while the connection establishes.
     go("matchmaking");
+    void startMatchmaking({ ranked: true, stake: l.entry });
   };
 
   return (