Sign panel sessions and isolate test runs

- Replace in-memory auth sessions with signed cookies and signed OAuth state
- Add auth route coverage and update panel/web server wiring
- Switch test script to per-file Bun processes and clean up type checks

shared/modules/quest/quest.service.test.ts

@@ -127,10 +127,10 @@ describe("questService", () => {
                 { userId: 1n, questId: 1, completedAt: null },
                 { userId: 1n, questId: 2, completedAt: new Date() },
             ]);
-            mockReturning.mockResolvedValue([{ userId: 1n, questId: 3 }]);
+            mockReturning.mockResolvedValue([{ userId: 1n, questId: 3 }] as any);
 
             const result = await questService.assignQuest("1", 3);
-            expect(result).toEqual([{ userId: 1n, questId: 3 }]);
+            expect(result).toEqual([{ userId: 1n, questId: 3 }] as any);
 
             mockGetSettings.mockRestore();
         });