feat: anonymous ticket tracking as standalone public page

- tracking: promoted to public route (before auth gate) with full single-ticket view
- backend: GET /tickets/tracking/:id validates cookie tracking_token, returns responses/attachments/transfers
- tracking.js: rewrite - token list + chat-flow detail (player/staff bubbles) + processing log + anon reply
- ticket-create: anon submit now lands on #/tracking instead of home
- home: tracking tab navigates to standalone page

public/js/pages/ticket-create.js

@@ -233,7 +233,7 @@ const TicketCreate = {
         }
         alert('提交成功！工单编号: #' + res.id);
         if (Auth.logged()) App.navigate('tickets');
-        else App.navigate('home');
+        else App.navigate('tracking'); // 匿名: 直达追踪页查看工单与回复
       } catch (ex) {
         alert(ex.message);
         btn.disabled = false;