Sign panel sessions and isolate test runs

- Replace in-memory auth sessions with signed cookies and signed OAuth state
- Add auth route coverage and update panel/web server wiring
- Switch test script to per-file Bun processes and clean up type checks

panel/src/lib/useGameRoom.ts

@@ -28,11 +28,15 @@ export function useGameRoom(roomId: string, userId: string, role?: string, prefe
     const { send, subscribe, connected } = useWebSocket();
     const navigate = useNavigate();
     const navigateRef = useRef(navigate);
-    const errorTimerRef = useRef<ReturnType<typeof setTimeout>>();
+    const errorTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
     useEffect(() => {
         navigateRef.current = navigate;
     }, [navigate]);
-    useEffect(() => () => clearTimeout(errorTimerRef.current), []);
+    useEffect(() => () => {
+        if (errorTimerRef.current !== null) {
+            clearTimeout(errorTimerRef.current);
+        }
+    }, []);
 
     const [state, setState] = useState<GameRoomState>({
         gameState: null,
@@ -153,7 +157,9 @@ export function useGameRoom(roomId: string, userId: string, role?: string, prefe
                         setTimeout(() => navigateRef.current("/games"), 2000);
                     } else {
                         setState(prev => ({ ...prev, error: msg.message }));
-                        clearTimeout(errorTimerRef.current);
+                        if (errorTimerRef.current !== null) {
+                            clearTimeout(errorTimerRef.current);
+                        }
                         errorTimerRef.current = setTimeout(() => {
                             setState(prev => ({ ...prev, error: null }));
                         }, 5000);