fix: 🐛 apply KIOSK_OBJECTIVES filter to WebSocket broadcast

The /api/kiosk endpoint correctly filtered goals by KIOSK_OBJECTIVES, but broadcastKioskState() sent all goals over WebSocket, so any webhook message or goal update would cause the kiosk to display every objective instead of just the configured subset.