Adds a custom 404.html page and client-side path validation in
world/index.html so that unknown sub-paths like /world/api or
/world/nonexistent redirect to the 404 page instead of silently
loading the Workshop SPA.
Fixes#8
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>