- API: login/register now return OAuth2-standard {access_token, token_type: 'bearer'}
instead of {token} — matches frontend auth.ts expectations
- API: added has_api_key to login/register user responses
- API: password minimum changed from 8 to 6 characters (matches frontend)
- Tests: all 14 auth tests passing
- Fixed token field name (access_token)
- Fixed invite code insertion (use auth_mod DB path)
- Fixed duplicate username test (400 not 409)
- Added auth_mod.DB_PATH patch to both fixtures
- Added aiosqlite direct DB inserts for test data
- Removed system Python pollution from earlier --break-system-packages
- Set up project venv (.venv) with all deps for local test runs