authorize

Return true to admit peerId into the room identified by channelName, false to reject (structural exclusion — the connection is never added to the fanout).

This function is called outside the room's internal lock; it MAY suspend (e.g. to consult a session store). It must NOT hold any external lock while suspended.