Add comprehensive WebAuthn e2e/unit tests and virtual authenticator package

- Create @reviq/virtual-authenticator package with cryptographically valid
  WebAuthn credential generation for testing
- Add e2e tests for WebAuthn registration, authentication, passkey management
- Add unit tests for passkey-helpers and VirtualAuthenticator
- Add security tests for counter replay and tampered responses
- Configure test database environment in devenv.nix
- Add turbo.json test tasks and workspace configuration

Test results: 98 tests passing (54 virtual-authenticator, 25 e2e, 19 unit)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/api-server/src/utils/passkey-helpers.ts

@@ -40,7 +40,7 @@ export interface ParsedPasskey {
  * Raw passkey row from database
  */
 export interface PasskeyRow {
-  id: number;
+  id: string | number; // Int8 from DB comes as string
   user_id: number;
   credential_id: Uint8Array;
   public_key: Uint8Array;
@@ -64,7 +64,7 @@ export const parsePasskeyRow = (row: PasskeyRow): ParsedPasskey => {
   const publicKeyBytes = new Uint8Array(row.public_key);
 
   return {
-    id: row.id,
+    id: Number(row.id), // Convert Int8 (string) to number
     credentialId: uint8ArrayToBase64url(row.credential_id),
     publicKey: publicKeyBytes,
     counter: Number(row.counter),