fix: username sanitization, canvas creation modal fixes, and auth headers for tasks

app/server/api/auth/google.post.ts

@@ -34,7 +34,8 @@ export default defineEventHandler(async (event) => {
 
   const fbUser: FirebaseUser = verifyRes.users[0]
   const email = fbUser.email
-  const username = email.split('@')[0]
+  // Очищаем username: заменяем пробелы на дефисы и убираем спецсимволы
+  const username = email.split('@')[0].toLowerCase().replace(/\s+/g, '-').replace(/[^a-z0-9-_]/g, '')
   const userId = fbUser.localId
 
   const user = await prisma.user.upsert({