fix: address code review findings

- Add max_length=100 on BulkStatusRequest.room_names to prevent abuse
- Filter bulk endpoint results to rooms user can see (owned or shared)
- Throw on bulk-status fetch error instead of silently returning empty data
- Fix room_by_id type annotation: dict[str, DbRoom] instead of Any
- Remove stale "200ms" comment in test
- Enable strict: true in jest tsconfig
- Remove working docs from tracked files
- Simplify redundant ternary in test helper

www/jest.config.js

@@ -12,8 +12,7 @@ module.exports = {
           module: "esnext",
           moduleResolution: "bundler",
           esModuleInterop: true,
-          strict: false,
-          strictNullChecks: true,
+          strict: true,
           downlevelIteration: true,
           lib: ["dom", "dom.iterable", "esnext"],
         },