- resolve the session before handling board lookup errors so anonymous
users still get the /auth/login redirect on a missing home board
- map both NOT_FOUND and BAD_REQUEST to a 404 in the board page and in
generateMetadataAsync, matching the layout behavior
- clarify the getAvailability MCP description to mention demo-mode
availability