feat(turn): built-in public TURN server, no env vars needed

Default to Pinix public coturn on pinix-cn (81.70.98.26:3478).
Users no longer need to set TURN_URL/TURN_SECRET — WebRTC stream
works out of the box even behind NAT. Env vars still override.