H-337: restore Web widget reply visibility (#64)

* H-337: restore widget reply delivery

* H-337: harden widget conversation ownership

---------

Co-authored-by: Rogee <rogee@ipao.vip>

frontend/app/javascript/shared/helpers/BaseActionCableConnector.js

@@ -30,6 +30,8 @@ class BaseActionCableConnector {
     let websocketURL = `${wsOrigin}/cable`;
     if (accessToken) {
       websocketURL += `?access-token=${encodeURIComponent(accessToken)}`;
+    } else if (pubsubToken) {
+      websocketURL += `?pubsub_token=${encodeURIComponent(pubsubToken)}`;
     }
 
     this.consumer = createConsumer(websocketURL);