Closed Beta v3 zip shipped with the dev/ directory included

**Status: needs triage** (build process)

## Observation
The MultiplayerClosedBeta-v3.zip distribution of the API mod contains `dev/init.lua` (and its contents differ from the repo's version). The repo's release CI (`.github/workflows/strip-dev.yml`) strips `dev/` from release builds, so the beta zip appears to have been built from a working tree through a path that bypasses that step.

## Impact
Low today — `dev/init.lua` only enables env-var-driven dev auth, and the dev impersonation endpoint 404s against production servers. But it means beta testers are silently running dev-mode clients, and anything added to `dev/` in the future would ship to them unnoticed. Beta builds should go through the same strip step as releases (or include dev tooling deliberately as a documented decision).

Start with .github/workflows/strip-dev.yml and trace how the MultiplayerClosedBeta-v3.zip was produced, looking for the beta packaging entry point that bypassed the strip step. Verify the resulting archive contents; done means beta builds consistently exclude dev/ or the repository documents an intentional decision to include it.

Written by the indexing model from the issue text.