fix sanctions and admin role escalation

app/game-api/src/trpc.ts

@@ -1,5 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { initTRPC, TRPCError } from '@trpc/server';
+import { isGameAccessBlocked } from '@sammo-ts/common/auth/sanctions';
 
 import type { GameApiContext } from './context.js';
 import { IdempotentTurnDaemonTransport } from './daemon/idempotentTransport.js';
@@ -14,6 +15,13 @@ const requireAuthMiddleware = t.middleware(({ ctx, next }) => {
             message: 'Unauthorized',
         });
     }
+    const profileNames = ctx.profile ? [ctx.profile.name, ctx.profile.id] : [];
+    if (isGameAccessBlocked(ctx.auth.sanctions, profileNames)) {
+        throw new TRPCError({
+            code: 'FORBIDDEN',
+            message: 'Game access is restricted for this account.',
+        });
+    }
     return next({
         ctx: {
             ...ctx,