Add tests for web app

[eheikes]

Adds 22 Playwright tests covering the main flows of the web app.

Logging in without Auth0: before each page loads, the tests fill the Auth0 SDK's localStorage cache with a fake logged-in user. They also add the API's mock-token header to the app's API calls, which the API accepts when MOCK_AUTH=true. I didn't change any app code.

Test data: each test creates its own items through the API, with titles starting with E2E- plus a unique ID, and deletes them afterwards. Leftovers from an interrupted run are deleted at the start of the next one. The startup guard ignores those E2E- items, because otherwise one crashed run would block every run after it.

What's covered:

• Login: a logged-out user is sent to the login page, and after logging in returns to the page they were on. Also the nav and user display, moving between pages, and logout.
• Home: the item list, filters (which survive a reload), hiding parents that have unfinished child items, marking done and restoring, and editing or cancelling an edit.
• Add Item: the full form with every field, adding a child item, and cancelling.
• Quick-add overlay: adding an item, the toast and its link to the new item, closing with Cancel or Escape, and switching to the full form.
• Choose: filtering by type, count and label, and marking a chosen item done.
• Single item page: viewing, editing and completing an item.
• Retrospective: completed items grouped by label, the day range, and the type and label filters.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​playwright/​test@​1.63.0

View full report