feat(hooks): useIsModerator() + migrate 6 component reads

Adds a reactive `useIsModerator()` derived from
`useUserDataSnapshot().securityLevel >= SecurityLevel.MODERATOR`
(mirrors the renderer-side getter at SessionDataManager.ts:684), and
migrates the six React component-body reads of
`GetSessionDataManager().isModerator`:

- ToolbarView (mod-only chat-input button)
- CatalogClassicView, CatalogModernView (admin toggles in catalog
  header)
- ChooserWidgetView (room-object id column visibility)
- YouTubePlayerView (room-control affordance — hook moved above the
  `if (!isOpen) return null` early return so the hook order stays
  stable when the player opens/closes)
- CalendarView (mod-only "open all" affordance)

UX impact: any future promote/demote that flips
SESSION_DATA_UPDATED now re-renders the mod-only UI live, instead of
requiring an F5. Imperative call sites
(AvatarInfoUtilities.populate*, CanManipulateFurniture,
RoomChatHandler) still read the manager directly — they run at click
time, not in a React render, so reactivity has no upside there.

Five of the six call sites are top-level component-body reads (no
early-return interaction). YouTubePlayerView has an
`if (!isOpen) return null` below the hook list, so the hook had to
move ABOVE it; same shape as the recent CatalogPurchaseWidgetView and
CatalogItemGridWidgetView fixes.

Verification: yarn typecheck clean, yarn lint:hooks clean, yarn test
209/209.

src/components/toolbar/YouTubePlayerView.tsx

@@ -1,9 +1,9 @@
 import { ControlYoutubeDisplayPlaybackMessageComposer, YouTubeRoomBroadcastEvent, YouTubeRoomPlayComposer, YouTubeRoomSettingsEvent, YouTubeRoomWatchersEvent, YouTubeRoomWatchingComposer } from '@nitrots/nitro-renderer';
 import { FC, useEffect, useRef, useState } from 'react';
 import ReactPlayer from 'react-player/youtube';
-import { GetRoomSession, getYoutubeRoomEnabled, GetSessionDataManager, LocalizeText, SendMessageComposer, YoutubeVideoPlaybackStateEnum } from '../../api';
+import { GetRoomSession, getYoutubeRoomEnabled, LocalizeText, SendMessageComposer, YoutubeVideoPlaybackStateEnum } from '../../api';
 import { NitroCardContentView, NitroCardHeaderView, NitroCardView, LayoutAvatarImageView } from '../../common';
-import { useFurnitureYoutubeWidget, useMessageEvent } from '../../hooks';
+import { useFurnitureYoutubeWidget, useIsModerator, useMessageEvent } from '../../hooks';
 
 const CONTROL_COMMAND_PREVIOUS_VIDEO = 0;
 const CONTROL_COMMAND_NEXT_VIDEO = 1;
@@ -46,6 +46,9 @@ export const YouTubePlayerView: FC<{}> = () =>
     const [broadcastPlaylist, setBroadcastPlaylist] = useState<string[]>([]);
     const [watcherIds, setWatcherIds] = useState<Set<number>>(new Set());
     const [youtubeEnabled, setYoutubeEnabled] = useState(getYoutubeRoomEnabled());
+    // Reactive — must sit above the `if (!isOpen) return null` below
+    // so the hook order stays stable across renders.
+    const isModerator = useIsModerator();
 
     useMessageEvent<YouTubeRoomSettingsEvent>(YouTubeRoomSettingsEvent, event =>
     {
@@ -270,7 +273,7 @@ export const YouTubePlayerView: FC<{}> = () =>
     const isPlaying = currentVideoState === YoutubeVideoPlaybackStateEnum.PLAYING;
     const isPaused = currentVideoState === YoutubeVideoPlaybackStateEnum.PAUSED;
     const roomSession = GetRoomSession();
-    const isMyRoom = GetSessionDataManager().isModerator || (roomSession && roomSession.isRoomOwner);
+    const isMyRoom = isModerator || (roomSession && roomSession.isRoomOwner);
 
     const QuickVolumeButton = ({
         value,