ci: parallelize and isolate test suites (#556)

* ci: parallelize and isolate test suites

* ci: avoid unavailable Playwright video runtime

* ci: shard coverage and cache docker smoke

* ci: balance Playwright shards by test

* ci: smoke test the CLI container

* ci: enforce merged coverage thresholds

* ci: ratchet canonical coverage baseline

* ci: make coverage ratchet lossless

* ci: organize parallel gates by responsibility

* perf(ci): reduce total runner time

* perf(ci): balance runner cost and latency

* perf(ci): suppress passing test logs

* fix(test): make coverage sorting proof deterministic

* perf(docker): exclude test-only build inputs

* perf(ci): scope Docker smokes to packaging changes

* refactor(test): enforce fast test boundaries

* test: isolate coverage ownership

* perf(test): run backend projects concurrently

* perf(ci): separate test layers by runtime

* perf(test): separate integration boundaries

* perf(ci): prioritize test runners

* docs(ci): clarify package scheduling

* test: restore shared Cloudflare mocks

* fix(preview): isolate Cloudflare E2E build config

* fix(auth): bind preview sessions to request origin

* revert: remove ineffective preview auth workaround

* fix(auth): stop signing JWTs on session reads

server/http/auth/auth.integration.test.ts

@@ -2,6 +2,8 @@ import { isPersonalOrgLike } from '@shared/org-slugs'
 import { eq } from 'drizzle-orm'
 import { afterEach, describe, expect, it, vi } from 'vitest'
 import { CAPTCHA_ENABLED_KEY, CAPTCHA_SECRET_OPTION_KEY, CAPTCHA_SITE_KEY_KEY } from '../../../shared/captcha.js'
+import { createApp } from '../../app.js'
+import { createAuth } from '../../auth.js'
 import * as authSchema from '../../db/auth-schema.js'
 import * as schema from '../../db/schema.js'
 import { createTestApp } from '../../test/setup.js'
@@ -398,7 +400,9 @@ describe('Auth API', () => {
   })
 
   it('sign-in with a malformed stored password hash returns a non-200 error response', async () => {
-    const { app, db } = await createTestApp()
+    const { db, deps, platform } = await createTestApp()
+    const auth = await createAuth(platform, 'test-secret', 'http://localhost:3000')
+    const app = createApp(platform, auth, deps)
     await app.request('/api/auth/sign-up/email', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },