fix: proxy Bandsintown events through backend to bypass 403, always show ticket link with sold-out badge

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/novasonic-server.js

@@ -315,6 +315,20 @@ app.get('/api/itunes/:endpoint', (req, res) => {
   }).on('error', e => res.status(502).json({ error: e.message }));
 });
 
+app.get('/api/events/:artist', (req, res) => {
+  const artist = req.params.artist;
+  const target = `https://rest.bandsintown.com/artists/${encodeURIComponent(artist)}/events?app_id=novasonic`;
+  https.get(target, {
+    headers: {
+      'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36',
+      'Accept': 'application/json',
+    }
+  }, upstream => {
+    res.setHeader('Content-Type', 'application/json');
+    upstream.pipe(res);
+  }).on('error', e => res.status(502).json({ error: e.message }));
+});
+
 app.get('/api/health', (req, res) => {
   res.json({
     status: 'ok', ytdlpVersion,