Fix 20 pre-existing test failures:
- Update mock conversation DB schema with missing columns
- Add in-memory OPC database mock to avoid PostgreSQL dependency in CI
- Fix file download endpoint to check auth before revealing file existence
- Reload routers.system and routers.security in test_app for fresh config
- Reset cached Docker client in security router between tests
- Fix websocket auth test to properly check for connection rejection
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Add 15 WebSocket security tests (terminal and OPC)
- Test authentication, authorization, session limits
- Test ping/pong keepalive and resize protocol
- Add 13 tests for passkey router (registration, login, management)
- Add 11 tests for terminal router (configuration, session management)
- Verify passkey privilege escalation fix is in place
- Test terminal known_hosts validation and SSH command building
- Improve test coverage for security-critical WebSocket endpoints
Gan, Jimmy