Add comprehensive WebAuthn e2e/unit tests and virtual authenticator package

- Create @reviq/virtual-authenticator package with cryptographically valid
  WebAuthn credential generation for testing
- Add e2e tests for WebAuthn registration, authentication, passkey management
- Add unit tests for passkey-helpers and VirtualAuthenticator
- Add security tests for counter replay and tampered responses
- Configure test database environment in devenv.nix
- Add turbo.json test tasks and workspace configuration

Test results: 98 tests passing (54 virtual-authenticator, 25 e2e, 19 unit)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/api-server/package.json

@@ -8,7 +8,9 @@
     "build": "bun build src/index.ts --outdir dist",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --cache",
-    "clean": "rm -rf dist .eslintcache"
+    "clean": "rm -rf dist .eslintcache",
+    "test:e2e": "bun test src/__tests__/e2e --no-parallel",
+    "test:unit": "bun test src/__tests__/unit"
   },
   "dependencies": {
     "@orpc/server": "^1.13.2",
@@ -22,8 +24,11 @@
   "devDependencies": {
     "@macalinao/eslint-config": "catalog:",
     "@macalinao/tsconfig": "catalog:",
+    "@reviq/virtual-authenticator": "workspace:*",
     "@types/bun": "catalog:",
+    "@types/pg": "^8.16.0",
     "eslint": "catalog:",
+    "pg": "^8.16.3",
     "typescript": "catalog:"
   }
 }