Exposing LiveKit status in site settings serializer

No. Exposing that would be borderline information disclosure. Only the current user needs to know about his own permissions.

Yes, 100%.

Use expected_transport.