upgrade_done flag is not per-connection

**Description:**
`upgrade_done` is a global flag but WebSocket upgrades happen per connection. This can cause incorrect behavior when multiple clients connect simultaneously. It should be tracked per connection instead of globally.