fix: reset bootstrapPromise after successful pairing to prevent redirect loop

After submitServerAuthCredential successfully exchanges a token,
the module-level bootstrapPromise was never cleared. This caused
resolveInitialServerAuthGateState to return the stale cached
requires-auth state, trapping users in a redirect loop between
/ and /pair despite being authenticated.

Author: cursoragent

apps/web/src/authBootstrap.ts

@@ -123,6 +123,7 @@ export async function submitServerAuthCredential(credential: string): Promise<vo
 
   await exchangeBootstrapCredential(resolvePrimaryEnvironmentHttpBaseUrl(), trimmedCredential);
   stripPairingTokenFromUrl();
+  bootstrapPromise = null;
 }
 
 export function resolveInitialServerAuthGateState(): Promise<ServerAuthGateState> {