fix: force HLS player to start from live edge on every page load

- Set autoStartLoad: false to prevent hls.js from loading segments
  before MANIFEST_PARSED, where we explicitly call startLoad(-1) to
  begin at the live edge
- Add Cache-Control: no-cache to XHR requests so the browser always
  revalidates playlists/segments with the server instead of serving
  stale HTTP-cached responses

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Sbussiso

frontend/src/components/HlsPlayer.jsx

@@ -37,14 +37,17 @@ function HlsPlayer({ cameraId, cameraName }) {
 
                 if (Hls.isSupported()) {
                     const hls = new Hls({
+                        // Don't auto-start loading — we call startLoad(-1)
+                        // in MANIFEST_PARSED to ensure playback always begins
+                        // from the live edge, not from a stale buffer position.
+                        autoStartLoad: false,
+
                         xhrSetup: (xhr, url) => {
-                            // Send the shared auth token to our own backend.
-                            // Live segments are served same-origin from the
-                            // backend proxy, so the Authorization header rides
-                            // along with every fetch — no presigned URLs.
                             const token = LOCAL_TEST_MODE ? null : getCurrentToken()
                             if (token && url.startsWith(ownOrigin)) {
                                 xhr.setRequestHeader("Authorization", `Bearer ${token}`)
+                                // Prevent browser from serving cached playlist/segment
+                                xhr.setRequestHeader("Cache-Control", "no-cache")
                             }
                         },