fix(node-player): use Express 5 catch-all route syntax

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

furumi-node-player/server/src/index.ts

@@ -86,7 +86,7 @@ app.get('/auth/token', (req, res) => {
   }
 
   const accessToken = req.oidc.accessToken?.access_token;
-  const expiresAt = req.oidc.accessToken?.expires_at;
+  const expiresAt = req.oidc.accessToken?.expires_in;
   if (!accessToken) {
     res.status(500).json({ error: 'no access token in session' });
     return;
@@ -95,7 +95,7 @@ app.get('/auth/token', (req, res) => {
   res.json({
     access_token: accessToken,
     token_type: 'Bearer',
-    expires_at: expiresAt,
+    expires_in: expiresAt,
   });
 });
 
@@ -124,7 +124,7 @@ app.get('/auth/logout', (req, res) => {
 // Production: serve Vite-built client as static files
 const clientDist = path.resolve(import.meta.dirname, '../../client/dist');
 app.use(express.static(clientDist));
-app.get('*', (_req, res) => {
+app.get('/{*path}', (_req, res) => {
   res.sendFile(path.join(clientDist, 'index.html'));
 });