Merge branch 'wt3': WebAuthn enhancements and virtual authenticator

- Enhanced createRegistrationOptions to look up existing users
- Added virtual-authenticator testing package
- Added WebAuthn e2e and unit tests

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

devenv.nix

@@ -18,10 +18,14 @@
 
   services.postgres = {
     enable = true;
-    initialDatabases = [ { name = "reviq-dashboard"; } ];
+    initialDatabases = [
+      { name = "reviq-dashboard"; }
+      { name = "reviq-dashboard_test"; }
+    ];
     initialScript = ''
       CREATE USER reviq WITH PASSWORD 'reviq' SUPERUSER;
       GRANT ALL PRIVILEGES ON DATABASE "reviq-dashboard" TO reviq;
+      GRANT ALL PRIVILEGES ON DATABASE "reviq-dashboard_test" TO reviq;
     '';
     listen_addresses = "localhost";
   };
@@ -32,6 +36,9 @@
     "api-server".exec = "bun run --cwd apps/api-server dev";
   };
 
+  env.DATABASE_URL = "postgres://reviq:reviq@localhost/reviq-dashboard";
+  env.TEST_DATABASE_URL = "postgres://reviq:reviq@localhost/reviq-dashboard_test";
+
   scripts = {
     "db-up".exec = "dbmate up";
     "db-new".exec = "dbmate new \"$1\"";